Medium · 4.8 CVE-2022-40311 EUVD-2022-43606GHSA-v857-88q9-q29h

WordPress Analytics Cat plugin <= 1.0.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Published Oct 21, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) in Fatcat Apps Analytics Cat plugin <= 1.0.9 on WordPress.

Vendor	Product	Affected	Fixed
Fatcat Apps	Analytics Cat – Google Analytics Made Easy (WordPress plugin)	<= 1.0.9 – ≤ 1.0.9	—