Secure Copy Content Protection and Content Locking WordPress Plugin Missing Authorization Vulnerability

A vulnerability exists in the Secure Copy Content Protection and Content Locking plugin for WordPress, affecting all versions through 4.4.7. The issue arises from a missing capability check in the 'ays_sccp_reports_user_search()' function, which allows unauthenticated users to access a list of registered user emails. This vulnerability could be exploited by attackers to gather email addresses without authorization.

Impact

Exploitation of this vulnerability allows for unauthorized retrieval of user email addresses, potentially leading to privacy violations or targeted phishing attacks.

Reproduction

The vulnerability can be reproduced by sending a request to the 'ays_sccp_reports_user_search' function without authentication. This can be done by an unauthenticated user, such as a guest, through an AJAX request. The absence of a proper capability check allows the request to be processed, resulting in the exposure of user email addresses.

Remediation

Users are advised to update the Secure Copy Content Protection and Content Locking plugin to version 4.4.8 or later, where this vulnerability has been patched.