fatcatapps

Records29All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

fatcatapps records in CISA KEV

No fatcatapps vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Easy Pricing Tables 4 records LOW Pixel Cat 3 records MEDIUM Analytics Cat 2 records LOW Campaign Monitor Optin Cat 1 record HIGH Forms For Mailchimp By Optin Cat 1 record LOW Getresponse Forms 1 record LOW Landing Page Cat 1 record LOW Pricing Tables 1 record MEDIUM

Records

3 records in Pixel Cat · all components

TI-2021-07202 CVE-2021-24922 · GHSA-7x28-3j26-66f5

Pixel Cat Lite < 2.6.2 - CSRF to Stored Cross-Site Scripting

MEDIUM 40

The Pixel Cat WordPress plugin before 2.6.2 does not have CSRF check when saving its settings, and did not sanitise as well as escape some of them, which could allow attacker to make a logged in admin change them and per…

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00552 Published 2021-12-13 Fixed in 2.6.2 CWE-352

TI-2024-07921 CVE-2024-8544 · GHSA-jg2j-fm65-xv4m

Pixel Cat – Conversion Pixel Manager <= 3.0.5 - Reflected Cross-Site Scripting

LOW 28

The Pixel Cat – Conversion Pixel Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including,…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00523 Published 2024-09-24 No fix listed CWE-79

TI-2021-07251 CVE-2021-24972 · GHSA-3qxf-882j-fq36

Pixel Cat Lite < 2.6.3 - Admin+ Stored Cross-Site Scripting

LOW 23

The Pixel Cat WordPress plugin before 2.6.3 does not escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00617 Published 2021-12-13 Fixed in 2.6.3 CWE-79

Open these records in search →