CVE-2026-9269Disclosure

LOWCVSS 3.5 · LOW

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The Secure Copy Content Protection and Content Locking WordPress plugin before 5.1.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://wpscan.com/vulnerability/61a3f41d-f031-4dba-b5cf-4ca3bce71b1b/

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Full discourse3 posts

Infoflowcloud@infoflowcloud136d
Disclosure
🚨*CVE* CVE-2026-9269 The Secure Copy Content Protection and Content Locking WordPress plugin before 5.1.5 does not sanitise and escape some of its settings, which could allow high privilege… https://www.cve.org/CVERecord?id=CVE-2026-9269 ----- Traducción: CVE-2026-9269 El … http://infoflow.cloud`
Post summary
The tweet announces CVE-2026-9269, noting unsafe input handling in the WordPress Secure Copy Content Protection plugin that could lead to privilege escalation, but offers no PoC, patch, or exploitation details.
0000026
79 followersView on X
CVE@CVEnew136d
Disclosure
CVE-2026-9269 The Secure Copy Content Protection and Content Locking WordPress plugin before 5.1.5 does not sanitise and escape some of its settings, which could allow high privilege… https://www.cve.org/CVERecord?id=CVE-2026-9269
Post summary
The excerpt announces CVE-2026-9269 as a high-privilege escalation issue in a WordPress plugin caused by missing sanitization, with no evidence of active exploitation, patch, or PoC.
00000173
57.6K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds136d
Disclosure
CVE-2026-9269 Stored Cross-Site Scripting in Secure Copy Content Protection WordPress Plugin Before 5.1.5 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-9269
Post summary
The post announces a stored XSS vulnerability in the Secure Copy Content Protection WordPress plugin before v5.1.5 and links to a details page, but provides no PoC, exploit code, or evidence of active exploitation.
0000046
4.0K followersView on X

Explore more

Back to dashboard