Vulnerabilities > Fatcatapps
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-11-06 | CVE-2024-8323 | Cross-site Scripting vulnerability in Fatcatapps Easy Pricing Tables The Pricing Tables WordPress Plugin – Easy Pricing Tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘fontFamily’ attribute in all versions up to, and including, 3.2.6 due to insufficient input sanitization and output escaping. | 5.4 |
| 2024-10-18 | CVE-2024-8740 | Cross-site Scripting vulnerability in Fatcatapps Getresponse Forms The GetResponse Forms by Optin Cat plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.5.6. | 6.1 |
| 2024-09-24 | CVE-2024-8544 | Cross-site Scripting vulnerability in Fatcatapps Pixel CAT The Pixel Cat – Conversion Pixel Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.0.5. | 6.1 |
| 2023-11-14 | CVE-2023-47545 | Unspecified vulnerability in Fatcatapps Forms for Mailchimp BY Optin CAT Auth. | 5.4 |
| 2023-10-31 | CVE-2023-5098 | Unspecified vulnerability in Fatcatapps Campaign Monitor Optin CAT The Campaign Monitor Forms by Optin Cat WordPress plugin before 2.5.6 does not prevent users with low privileges (like subscribers) from overwriting any options on a site with the string "true", which could lead to a variety of outcomes, including DoS. | 8.1 |
| 2023-01-30 | CVE-2022-4654 | Unspecified vulnerability in Fatcatapps Pricing Tables The Pricing Tables WordPress Plugin WordPress plugin before 3.2.3 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack. | 5.4 |
| 2022-11-08 | CVE-2022-27855 | Cross-Site Request Forgery (CSRF) vulnerability in Fatcatapps Analytics CAT Cross-Site Request Forgery (CSRF) vulnerability in Fatcat Apps Analytics Cat plugin <= 1.0.9 on WordPress allows Plugin Settings Change. | 4.3 |
| 2022-10-21 | CVE-2022-40311 | Cross-site Scripting vulnerability in Fatcatapps Analytics CAT Auth. | 4.8 |
| 2022-06-27 | CVE-2022-1904 | Unspecified vulnerability in Fatcatapps Easy Pricing Tables The Pricing Tables WordPress Plugin WordPress plugin before 3.2.1 does not sanitise and escape parameter before outputting it back in a page available to any user (both authenticated and unauthenticated) when a specific setting is enabled, leading to a Reflected Cross-Site Scripting | 6.1 |
| 2022-06-02 | CVE-2021-36866 | Unspecified vulnerability in Fatcatapps Easy Pricing Tables Authenticated (author or higher role) Stored Cross-Site Scripting (XSS) vulnerability in Fatcat Apps Easy Pricing Tables plugin <= 3.1.2 at WordPress. | 4.8 |