{"id":"CVE-2017-20246","state":"PUBLISHED","title":"KittyCatfish 2.2 Plugin for WordPress SQL Injection","description":"KittyCatfish 2.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to read database contents by exploiting an unescaped GET parameter. Attackers can inject SQL code through the 'kc_ad' parameter in base.css.php or kittycatfish.php to extract sensitive database information using boolean-based blind or time-based blind techniques.","publishedAt":"2026-06-09T11:48:35.588Z","updatedAt":"2026-06-09T16:11:14.634Z","severity":{"score":8.8,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["Missilesilo KittyCatfish"],"affected":[{"vendor":"Missilesilo","product":"KittyCatfish","versions":[{"version":"2.2","status":"affected"}]}],"references":["https://www.exploit-db.com/exploits/41919","https://wordpress.org/plugins-wp/kittycatfish/","https://tad.group","https://www.vulncheck.com/advisories/kittycatfish-plugin-for-wordpress-sql-injection"],"weaknesses":["CWE-89"],"ingestedAt":"2026-10-29T19:43:37.076Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2017/20xxx/CVE-2017-20246.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2017-20246","state":"PUBLISHED","datePublished":"2026-06-09T11:48:35.588Z","dateUpdated":"2026-06-09T16:11:14.634Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2026-06-08T11:46:56.805Z"},"containers":{"cna":{"title":"KittyCatfish 2.2 Plugin for WordPress SQL Injection","descriptions":[{"lang":"en","value":"KittyCatfish 2.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to read database contents by exploiting an unescaped GET parameter. Attackers can inject SQL code through the 'kc_ad' parameter in base.css.php or kittycatfish.php to extract sensitive database information using boolean-based blind or time-based blind techniques."}],"affected":[{"vendor":"Missilesilo","product":"KittyCatfish","versions":[{"version":"2.2","status":"affected"}]}],"references":[{"url":"https://www.exploit-db.com/exploits/41919","name":"ExploitDB-41919","tags":["exploit"]},{"url":"https://wordpress.org/plugins-wp/kittycatfish/","name":"Official Product Homepage","tags":["product"]},{"url":"https://tad.group","name":"Official Product Homepage","tags":["product"]},{"url":"https://www.vulncheck.com/advisories/kittycatfish-plugin-for-wordpress-sql-injection","name":"VulnCheck Advisory: KittyCatfish 2.2 Plugin for WordPress SQL Injection","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":8.8,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS"},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-89","lang":"en","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-06-09T11:48:35.588Z"},"tags":["unsupported-when-assigned"],"datePublic":"2017-04-25T00:00:00.000Z","credits":[{"lang":"en","value":"TAD GROUP","type":"finder"}],"x_generator":{"engine":"vulncheck"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-06-09T16:11:00.627764Z","id":"CVE-2017-20246","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-06-09T16:11:14.634Z"}}]}}}