WP-Safety

Secure Copy Content Protection and Content Locking Security & Risk Analysis

wordpress.org/plugins/secure-copy-content-protection

Copy Protection plugin is activated it disables the right click, copy paste, content selection and copy shortcut keys

20K active installs v5.1.0 PHP + WP 4.0+ Updated Apr 14, 2026
content-copy-protectioncontent-protectioncopy-protectioncopyrightdisable-right-click
83
B · Generally Safe
CVEs total16
Unpatched0
Last CVEFeb 24, 2026
Plugin page Download
Safety Verdict

Is Secure Copy Content Protection and Content Locking Safe to Use in 2026?

Mostly Safe

Score 83/100

Secure Copy Content Protection and Content Locking is generally safe to use. 16 past CVEs were resolved.

16 known CVEsLast CVE: Feb 24, 2026Updated 1mo ago
Risk Assessment

The "secure-copy-content-protection" v5.0.5 plugin presents a mixed security posture. While it demonstrates some good practices, such as a relatively high percentage of SQL queries using prepared statements and a reasonable number of capability checks, significant concerns arise from its attack surface and taint analysis. A substantial portion of AJAX handlers lack authentication checks, creating a broad entry point for potential unauthorized actions. The presence of unsanitized paths in taint flows, even without critical or high-severity vulnerabilities identified in this specific analysis, indicates a latent risk that could be exploited with malicious input.

Key Concerns

  • Unprotected AJAX handlers
  • Taint flow with unsanitized paths
  • Unescaped output percentage
  • Vulnerability history: 1 critical CVE
  • Vulnerability history: 2 high CVEs
  • Vulnerability history: 12 medium CVEs
  • Bundled libraries (potential outdated versions)
Vulnerabilities
16 published

Secure Copy Content Protection and Content Locking Security Vulnerabilities

CVEs by Year

2 CVEs in 2021
2021
6 CVEs in 2024
2024
5 CVEs in 2025
2025
3 CVEs in 2026
2026
Patched Has unpatched

Severity Breakdown

Critical
1
High
2
Medium
13

16 total CVEs

CVE-2026-2367medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Secure Copy Content Protection and Content Locking <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute

Feb 24, 2026 Patched in 5.0.2 (1d)
CVE-2026-1320high · 7.2Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Secure Copy Content Protection and Content Locking <= 4.9.8 - Unauthenticated Stored Cross-Site Scripting via X-Forwarded-For Header

Feb 12, 2026 Patched in 4.9.9 (1d)
CVE-2026-25335medium · 4.3Missing Authorization

Secure Copy Content Protection and Content Locking <= 5.0.0 - Missing Authorization

Feb 8, 2026 Patched in 5.0.1 (86d)
CVE-2025-14442medium · 5.3Files or Directories Accessible to External Parties

Secure Copy Content Protection and Content Locking <= 4.9.2 - Unauthenticated Sensitive Information Exposure via Exposed CSV Export File

Dec 11, 2025 Patched in 4.9.3 (1d)
CVE-2025-14159medium · 4.3Cross-Site Request Forgery (CSRF)

Secure Copy Content Protection and Content Locking <= 4.9.2 - Cross-Site Request Forgery to Data Export

Dec 11, 2025 Patched in 4.9.3 (1d)
CVE-2025-32133medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Secure Copy Content Protection and Content Locking <= 4.5.5 - Authenticated (Administrator+) Stored Cross-Site Scripting

Apr 4, 2025 Patched in 4.5.6 (27d)
CVE-2025-30905medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Secure Copy Content Protection and Content Locking <= 4.4.3 - Unauthenticated Stored Cross-Site Scripting

Apr 1, 2025 Patched in 4.4.5 (9d)
CVE-2025-1404medium · 5.3Missing Authorization

Secure Copy Content Protection and Content Locking <= 4.4.7 - Missing Authorization to Unauthenticated User Email Retrieval via ays_sccp_reports_user_search Function

Feb 28, 2025 Patched in 4.4.8 (1d)
CVE-2024-47306medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Secure Copy Content Protection and Content Locking <= 4.2.3 - Reflected Cross-Site Scripting

Sep 25, 2024 Patched in 4.2.4 (8d)
CVE-2024-6889medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Secure Copy Content Protection and Content Locking <= 4.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting

Aug 13, 2024 Patched in 4.1.7 (31d)
CVE-2024-6888medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Secure Copy Content Protection and Content Locking <= 4.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting

Aug 13, 2024 Patched in 4.1.7 (31d)
CVE-2024-6138medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Secure Copy Content Protection and Content Locking <= 4.0.8 - Authenticated (Admin+) Stored Cross-Site Scripting

Jun 20, 2024 Patched in 4.0.9 (51d)
CVE-2024-33587medium · 5.3Missing Authorization

Secure Copy Content Protection and Content Locking <= 3.9.0 - Missing Authorization

Apr 25, 2024 Patched in 3.9.1 (7d)
CVE-2024-32787medium · 4.3Missing Authorization

Secure Copy Content Protection and Content Locking <= 3.7.1 - Missing Authorization

Apr 22, 2024 Patched in 3.7.2 (8d)
CVE-2021-24931critical · 9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Secure Copy Content Protection and Content Locking <= 2.8.1 - Unauthenticated SQL Injection

Nov 8, 2021 Patched in 2.8.2 (806d)
CVE-2021-24484high · 7.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Secure Copy Content Protection and Content Locking <= 2.6.6 - SQL Injection

Jun 29, 2021 Patched in 2.6.7 (938d)
Version History

Secure Copy Content Protection and Content Locking Release Timeline

v5.1.0Current
v5.0.9
v5.0.8
v5.0.7
v5.0.6
v5.0.5
v5.0.4
v5.0.3
v5.0.2
v5.0.11 CVE
CVE-2026-2367
v5.0.02 CVEs
CVE-2026-2367 CVE-2026-25335
v4.9.92 CVEs
CVE-2026-2367 CVE-2026-25335
v4.9.83 CVEs
CVE-2026-1320 CVE-2026-2367 CVE-2026-25335
v4.9.73 CVEs
CVE-2026-1320 CVE-2026-2367 CVE-2026-25335
v4.9.63 CVEs
CVE-2026-1320 CVE-2026-2367 CVE-2026-25335
v4.9.53 CVEs
CVE-2026-1320 CVE-2026-2367 CVE-2026-25335
v4.9.43 CVEs
CVE-2026-1320 CVE-2026-2367 CVE-2026-25335
v4.9.33 CVEs
CVE-2026-1320 CVE-2026-2367 CVE-2026-25335
v4.9.25 CVEs
CVE-2025-14442 CVE-2025-14159 CVE-2026-1320 +2 more
v4.9.15 CVEs
CVE-2025-14442 CVE-2025-14159 CVE-2026-1320 +2 more
Code Analysis
Analyzed Mar 16, 2026

Secure Copy Content Protection and Content Locking Code Analysis

Dangerous Functions
0
Raw SQL Queries
10
54 prepared
Unescaped Output
1007
797 escaped
Nonce Checks
12
Capability Checks
25
File Operations
8
External Requests
7
Bundled Libraries
2

Bundled Libraries

DataTablesSelect2

SQL Query Safety

84% prepared64 total queries

Output Escaping

44% escaped1804 total outputs
Data Flows · Security
5 unsanitized

Data Flow Analysis

10 flows5 with unsanitized paths
handle_sccp_download (admin\class-secure-copy-content-protection-admin.php:624)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
16 unprotected

Secure Copy Content Protection and Content Locking Attack Surface

Entry Points26
Unprotected16

AJAX Handlers 17

authwp_ajax_ays_sccp_deactivate_feedbackincludes\class-secure-copy-content-protection-feedback.php:35
authwp_ajax_deactivate_sccp_option_sccpincludes\class-secure-copy-content-protection.php:193
noprivwp_ajax_deactivate_sccp_option_sccpincludes\class-secure-copy-content-protection.php:194
authwp_ajax_ays_sccp_show_filtersincludes\class-secure-copy-content-protection.php:197
noprivwp_ajax_ays_sccp_show_filtersincludes\class-secure-copy-content-protection.php:198
authwp_ajax_ays_sccp_results_export_fileincludes\class-secure-copy-content-protection.php:200
noprivwp_ajax_ays_sccp_results_export_fileincludes\class-secure-copy-content-protection.php:201
authwp_ajax_ays_sccp_results_export_filterincludes\class-secure-copy-content-protection.php:203
noprivwp_ajax_ays_sccp_results_export_filterincludes\class-secure-copy-content-protection.php:204
authwp_ajax_ays_sccp_reports_user_searchincludes\class-secure-copy-content-protection.php:216
noprivwp_ajax_ays_sccp_reports_user_searchincludes\class-secure-copy-content-protection.php:217
authwp_ajax_ays_sccp_dismiss_buttonincludes\class-secure-copy-content-protection.php:225
noprivwp_ajax_ays_sccp_dismiss_buttonincludes\class-secure-copy-content-protection.php:226
authwp_ajax_ays_sccp_install_pluginincludes\class-secure-copy-content-protection.php:228
noprivwp_ajax_ays_sccp_install_pluginincludes\class-secure-copy-content-protection.php:229
authwp_ajax_ays_sccp_activate_pluginincludes\class-secure-copy-content-protection.php:231
noprivwp_ajax_ays_sccp_activate_pluginincludes\class-secure-copy-content-protection.php:232

Shortcodes 9

[ays_block] public\class-secure-copy-content-protection-public.php:63
[ays_block_subscribe] public\class-secure-copy-content-protection-public.php:64
[ays_sccp_subscribers_count] public\partials\class-secure-copy-content-protection-extra-shortcode.php:62
[ays_sccp_user_first_name] public\partials\class-secure-copy-content-protection-extra-shortcode.php:63
[ays_sccp_user_last_name] public\partials\class-secure-copy-content-protection-extra-shortcode.php:64
[ays_sccp_user_email] public\partials\class-secure-copy-content-protection-extra-shortcode.php:65
[ays_sccp_user_roles] public\partials\class-secure-copy-content-protection-extra-shortcode.php:66
[ays_sccp_user_display_name] public\partials\class-secure-copy-content-protection-extra-shortcode.php:67
[ays_sccp_user_nickname] public\partials\class-secure-copy-content-protection-extra-shortcode.php:68
WordPress Hooks 23
filterset-screen-optionadmin\class-secure-copy-content-protection-admin.php:58
actionadmin_post_sccp_download_exportadmin\class-secure-copy-content-protection-admin.php:67
actionadmin_noticesadmin\class-secure-copy-content-protection-admin.php:360
actioncurrent_screenincludes\class-secure-copy-content-protection-feedback.php:26
actionadmin_enqueue_scriptsincludes\class-secure-copy-content-protection-feedback.php:31
actionadmin_footerincludes\class-secure-copy-content-protection-feedback.php:61
actionplugins_loadedincludes\class-secure-copy-content-protection.php:168
actionadmin_menuincludes\class-secure-copy-content-protection.php:185
actionadmin_headincludes\class-secure-copy-content-protection.php:187
actionadmin_enqueue_scriptsincludes\class-secure-copy-content-protection.php:188
actionadmin_enqueue_scriptsincludes\class-secure-copy-content-protection.php:189
actionadmin_enqueue_scriptsincludes\class-secure-copy-content-protection.php:190
actioncurrent_screenincludes\class-secure-copy-content-protection.php:191
filterplugin_row_metaincludes\class-secure-copy-content-protection.php:211
actionadmin_enqueue_scriptsincludes\class-secure-copy-content-protection.php:213
actionin_admin_footerincludes\class-secure-copy-content-protection.php:219
actionadmin_noticesincludes\class-secure-copy-content-protection.php:223
actionwp_enqueue_scriptsincludes\class-secure-copy-content-protection.php:250
actionwp_enqueue_scriptsincludes\class-secure-copy-content-protection.php:251
actionwp_footerincludes\class-secure-copy-content-protection.php:252
actionadmin_noticesincludes\lists\class-secure-copy-content-protection-results-list-table.php:15
actionplugins_loadedsecure-copy-content-protection.php:85
actionadmin_noticessecure-copy-content-protection.php:170
Maintenance & Trust

Secure Copy Content Protection and Content Locking Maintenance & Trust

Maintenance Signals

WordPress version tested7.0
Last updatedApr 14, 2026
PHP min version
Downloads2.8M

Community Trust

Rating84/100
Number of ratings61
Active installs20K
Alternatives

Secure Copy Content Protection and Content Locking Alternatives

WP Protect Content

WP Protect Content

wp-protect-content

A
100

A very useful wordpress plugin to give extra protection for your website content. This plugin give you an option to Disable Copy content or prevent co &hellip;

2K No CVEs
All Content Copy Protection

All Content Copy Protection

all-content-copy-protection

A
92

All Content Copy Protection helps you protect your website content by disabling text selection, copying, right-clicking, and other actions.

0 No CVEs
WP Content Copy Protection & No Right Click

WP Content Copy Protection & No Right Click

wp-content-copy-protector

A
95

This WP plugin protects posts from being copied (content copy protection). Keep your content safe from unauthorized distribution!

100K 4 CVEs
WP Content Copy Protection with Color Design

WP Content Copy Protection with Color Design

wp-copy-protect-with-color-design

A
100

This plugin will protect the posts content from copying by disable right click and disable selecting text. You can exclude pages and posts.

6K No CVEs
WP-Copyright-Protection

WP-Copyright-Protection

wp-copyright-protection

A
92

Simple copyright protection for your images and text. No right click, no text selections, no screenshots. A very lean and clean plugin.

6K No CVEs
Developer Profile

Secure Copy Content Protection and Content Locking Developer Profile

Ays Pro

18 plugins · 111K total installs

73
trust score
Avg Security Score
92/100
Avg Patch Time
203 days
View full developer profile
Detection Fingerprints

How We Detect Secure Copy Content Protection and Content Locking

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/secure-copy-content-protection/admin/js/sccp-admin-script.js/wp-content/plugins/secure-copy-content-protection/admin/css/sccp-admin-style.css/wp-content/plugins/secure-copy-content-protection/public/css/sccp-public-style.css/wp-content/plugins/secure-copy-content-protection/public/js/sccp-public-script.js
Script Paths
/wp-content/plugins/secure-copy-content-protection/admin/js/sccp-admin-script.js/wp-content/plugins/secure-copy-content-protection/public/js/sccp-public-script.js
Version Parameters
secure-copy-content-protection/admin/js/sccp-admin-script.js?ver=secure-copy-content-protection/admin/css/sccp-admin-style.css?ver=secure-copy-content-protection/public/css/sccp-public-style.css?ver=secure-copy-content-protection/public/js/sccp-public-script.js?ver=

HTML / DOM Fingerprints

CSS Classes
ays-notice-bannernavigation-barays-logo-container-upgradelogo-containersccp-logoays-upgrade-containerays-sccp-logo-container-one-time-textmodile-ddmenu-lg+8 more
Data Attributes
data-expanded
JS Globals
SCCP_NAME_VERSIONSCCP_NAMESCCP_ADMIN_URLSCCP_PUBLIC_URLSCCP_DIRSCCP_BASENAME
FAQ

Frequently Asked Questions about Secure Copy Content Protection and Content Locking