What is GHSA-8xx3-4969-rp3q?

GHSA-8xx3-4969-rp3q is a security advisory published by GitHub Security Advisories with High severity. KittyCatfish 2.2 plugin for WordPress contains an SQL injection vulnerability that allows...

Which CVE IDs does GHSA-8xx3-4969-rp3q cover?

GHSA-8xx3-4969-rp3q covers the following CVE IDs: CVE-2017-20246. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8xx3-4969-rp3q?

GHSA-8xx3-4969-rp3q has a CVSS v3 base score of 8.2, published by GitHub Security Advisories.

GHSA-8xx3-4969-rp3qHighCVSS 8.2

KittyCatfish 2.2 plugin for WordPress contains an SQL injection vulnerability that allows...

Vendor

GitHub Security Advisories

Published

June 9, 2026

Last Modified

June 9, 2026

🔗 CVE IDs covered (1)

CVE-2017-20246 →

📋 Description

KittyCatfish 2.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to read database contents by exploiting an unescaped GET parameter. Attackers can inject SQL code through the 'kc_ad' parameter in base.css.php or kittycatfish.php to extract sensitive database information using boolean-based blind or time-based blind techniques.

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2017-20246
https://tad.group
https://wordpress.org/plugins-wp/kittycatfish
https://www.exploit-db.com/exploits/41919
https://www.vulncheck.com/advisories/kittycatfish-plugin-for-wordpress-sql-injection
https://github.com/advisories/GHSA-8xx3-4969-rp3q