Catch Themes vulnerabilities

Products

• Create 9

Newest

• catch themes create Create <= 2.5.3 - Authenticated (Author+) SQL Injection via 'order' Parameter CVE-2026-13200 6.5 MediumSeptember 19, 2026
• catch themes create Create <= 2.5.3 - Authenticated (Author+) SQL Injection via 'order_by' Parameter CVE-2026-13191 6.5 MediumSeptember 19, 2026
• catch themes create Create by Mediavine < 2.5.4 - Unauthenticated Unpublished Content Disclosure and Publication CVE-2026-18037 6.5 MediumAugust 9, 2026
• catch themes create Create by Mediavine < 2.5.4 - Unauthenticated Unpublished Content Disclosure and Publication CVE-2026-16992 6.5 MediumAugust 9, 2026
• catch themes create WordPress Create by Mediavine plugin <= 2.6.0 - Sensitive Data Exposure vulnerability CVE-2026-65490 5.3 MediumJuly 23, 2026
• catch themes create WordPress Create by Mediavine plugin <= 2.5.3 - SQL Injection vulnerability CVE-2026-24552 8.5 HighJuly 23, 2026
• catch themes essential widgets WordPress Essential Widgets plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability CVE-2025-67543 6.5 MediumDecember 9, 2025
• catch themes dark mode, catchthemes catch dark mode +1 more WordPress Catch Dark Mode plugin <= 2.0.1 - Local File Inclusion vulnerability CVE-2025-32154 7.5 HighApril 4, 2025
• catch themes duplicate switcher, notfound catch duplicate switcher +1 more WordPress Catch Duplicate Switcher plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-23619 7.1 HighMarch 3, 2025
• catch themes full frame WordPress Full frame theme <= 2.7.2 - Cross Site Scripting (XSS) vulnerability CVE-2024-44010 5.1 MediumOctober 6, 2024
• catch themes base, catchthemes catch base +1 more WordPress Catch Base theme <= 3.4.6 - Cross Site Scripting (XSS) vulnerability CVE-2024-47313 5.1 MediumOctober 6, 2024
• catch themes create WordPress Create theme <= 2.9.1 - Cross Site Scripting (XSS) vulnerability CVE-2024-47356 5.1 MediumOctober 6, 2024
• catch themes create Create by Mediavine <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Schema Meta Shortcode CVE-2024-5601 6.4 MediumJune 27, 2024
• catch themes create Create by Mediavine <= 1.9.4 - Unauthenticated SQL Injection via 'id' CVE-2024-1711 9.8 CriticalMarch 20, 2024
• catch themes darcie WordPress Darcie Theme <= 1.1.5 is vulnerable to Cross Site Scripting (XSS) CVE-2023-25961 7.1 HighMay 4, 2023