← WordPress Vulnerabilities
WordPress security by component

KittyCatfish

KittyCatfish is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jun 09, 2026; the highest CVE/CNA score is 8.8.

Plugin slug: kittycatfish-2-2

CVE-2017-20246: KittyCatfish: SQL injection

KittyCatfish is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is 2.2.

PublishedJun 09, 2026
Safe version guidanceSee mitigation notes
Safe version
Jun 09, 2026 CVE-2017-20246
KittyCatfish: SQL injection
KittyCatfish is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is 2.2.
See mitigation notes
CVE8.8
NVDPending