Fatcatapps

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-8323 1Fatcatapps 1Easy Pricing Tables Jun 17, 2026 Nov 6, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 The Pricing Tables WordPress Plugin – Easy Pricing Tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘fontFamily’ attribute in all versions up to, and including, 3.2.6 due to insufficient i...Show more The Pricing Tables WordPress Plugin – Easy Pricing Tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘fontFamily’ attribute in all versions up to, and including, 3.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.Show less
CVE-2024-8740 1Fatcatapps 1Getresponse Forms Jun 17, 2026 Oct 18, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 The GetResponse Forms by Optin Cat plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.5.7....Show more The GetResponse Forms by Optin Cat plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.5.7. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.Show less
CVE-2024-8544 1Fatcatapps 1Pixel Cat Jun 17, 2026 Sep 24, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 The Pixel Cat – Conversion Pixel Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including,...Show more The Pixel Cat – Conversion Pixel Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.0.5. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.Show less
CVE-2024-0708 1Fatcatapps 1Landing Page Cat Jun 17, 2026 Feb 15, 2024 N/A· v4 5.3 MEDIUM· v3 N/A· v2 The Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.7.2. This makes it possible for unaut...Show more The Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.7.2. This makes it possible for unauthenticated attackers to access landing pages that may not be public.Show less
CVE-2023-47545 1Fatcatapps 1Forms For Mailchimp By Optin Cat Jun 17, 2026 Nov 14, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Fatcat Apps Forms for Mailchimp by Optin Cat – Grow Your MailChimp List plugin <= 2.5.4 versions.
CVE-2023-5098 1Fatcatapps 1Campaign Monitor Optin Cat Jun 17, 2026 Oct 31, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 The Campaign Monitor Forms by Optin Cat WordPress plugin before 2.5.6 does not prevent users with low privileges (like subscribers) from overwriting any options on a site with the string "true", which could lead to a var...Show more The Campaign Monitor Forms by Optin Cat WordPress plugin before 2.5.6 does not prevent users with low privileges (like subscribers) from overwriting any options on a site with the string "true", which could lead to a variety of outcomes, including DoS.Show less
CVE-2022-4654 1Fatcatapps 1Pricing Tables Jun 17, 2026 Jan 30, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 The Pricing Tables WordPress Plugin WordPress plugin before 3.2.3 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scrip...Show more The Pricing Tables WordPress Plugin WordPress plugin before 3.2.3 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.Show less
CVE-2022-27855 1Fatcatapps 1Analytics Cat Jun 17, 2026 Nov 8, 2022 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Cross-Site Request Forgery (CSRF) vulnerability in Fatcat Apps Analytics Cat plugin <= 1.0.9 on WordPress allows Plugin Settings Change.
CVE-2022-40311 1Fatcatapps 1Analytics Cat Jun 17, 2026 Oct 21, 2022 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Auth. (admin+) Stored Cross-Site Scripting (XSS) in Fatcat Apps Analytics Cat plugin <= 1.0.9 on WordPress.
CVE-2022-1904 1Fatcatapps 1Easy Pricing Tables Jun 17, 2026 Jun 27, 2022 N/A· v4 6.1 MEDIUM· v3 2.6 LOW· v2 The Pricing Tables WordPress Plugin WordPress plugin before 3.2.1 does not sanitise and escape parameter before outputting it back in a page available to any user (both authenticated and unauthenticated) when a specific...Show more The Pricing Tables WordPress Plugin WordPress plugin before 3.2.1 does not sanitise and escape parameter before outputting it back in a page available to any user (both authenticated and unauthenticated) when a specific setting is enabled, leading to a Reflected Cross-Site ScriptingShow less
CVE-2021-36866 1Fatcatapps 1Easy Pricing Tables Jun 17, 2026 Jun 2, 2022 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 Authenticated (author or higher role) Stored Cross-Site Scripting (XSS) vulnerability in Fatcat Apps Easy Pricing Tables plugin <= 3.1.2 at WordPress.
CVE-2021-25098 1Fatcatapps 1Easy Pricing Tables Jun 17, 2026 Mar 7, 2022 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The Pricing Tables WordPress Plugin WordPress plugin before 3.1.3 does not verify the CSRF nonce when removing posts, allowing attackers to make a logged in admin remove arbitrary posts from the blog via a CSRF attack, w...Show more The Pricing Tables WordPress Plugin WordPress plugin before 3.1.3 does not verify the CSRF nonce when removing posts, allowing attackers to make a logged in admin remove arbitrary posts from the blog via a CSRF attack, which will be put in the trashShow less
CVE-2021-24972 1Fatcatapps 1Pixel Cat Jun 17, 2026 Dec 13, 2021 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 The Pixel Cat WordPress plugin before 2.6.3 does not escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed
CVE-2021-24922 1Fatcatapps 1Pixel Cat Jun 17, 2026 Dec 13, 2021 N/A· v4 9.0 CRITICAL· v3 6.0 MEDIUM· v2 The Pixel Cat WordPress plugin before 2.6.2 does not have CSRF check when saving its settings, and did not sanitise as well as escape some of them, which could allow attacker to make a logged in admin change them and per...Show more The Pixel Cat WordPress plugin before 2.6.2 does not have CSRF check when saving its settings, and did not sanitise as well as escape some of them, which could allow attacker to make a logged in admin change them and perform Cross-Site Scripting attacksShow less