Skip to content
Catchthemes vulnerabilities
Newest
-
catchthemes essential widgets
Essential Widgets <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
CVE-2026-0867
6.4 Medium
-
catch themes essential widgets
WordPress Essential Widgets plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability
CVE-2025-67543
6.5 Medium
-
catchthemes catch dark mode
Catch Dark Mode <= 2.0 - Authenticated (Contributor+) Local File Inclusion
CVE-2025-10143
7.5 High
-
catch themes dark mode, catchthemes catch dark mode +1 more
WordPress Catch Dark Mode plugin <= 2.0.1 - Local File Inclusion vulnerability
CVE-2025-32154
7.5 High
-
catch themes full frame
WordPress Full frame theme <= 2.7.2 - Cross Site Scripting (XSS) vulnerability
CVE-2024-44010
5.1 Medium
-
catch themes base, catchthemes catch base +1 more
WordPress Catch Base theme <= 3.4.6 - Cross Site Scripting (XSS) vulnerability
CVE-2024-47313
5.1 Medium
-
catch themes create
WordPress Create theme <= 2.9.1 - Cross Site Scripting (XSS) vulnerability
CVE-2024-47356
5.1 Medium
-
catch themes darcie
WordPress Darcie Theme <= 1.1.5 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-25961
7.1 High
-
catch plugins generate child theme, catch themes demo import themes demo import, catchplugins catch scroll progress bar +15 more +17 more
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
CVE-2021-24752
5.7 Medium