CVE-2021-24922

CRITICAL 9.0CVE-2021-24922 · Published 13/12/2021 · updated 17/06/2026

In short

CVE-2021-24922 is a CRITICAL (CVSS 9.0) vulnerability affecting pixel cat (fatcatapps).
Chance of exploitation in the next 30 days (EPSS): 0.55%, higher than 46.2% of all vulnerabilities.
Fix: update to 2.6.2 or later.

Package	Affected versions	Patched versions
pixel cat fatcatapps	`< 2.6.2`	`2.6.2`

Description

The Pixel Cat WordPress plugin before 2.6.2 does not have CSRF check when saving its settings, and did not sanitise as well as escape some of them, which could allow attacker to make a logged in admin change them and perform Cross-Site Scripting attacks

References

wpscan.com/vulnerability/399ffd65-f3c0-4fbe-a83a-2a620976aad2 · Exploit

More vulnerabilities in pixel cat

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free