catchthemes vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20243
3. 20251
4. 20261

Newest CVEs

• CVE-2026-0867

  Essential Widgets <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes

  catchthemes · Essential Widgets

  Medium6.4
• CVE-2025-10143

  Catch Dark Mode <= 2.0 - Authenticated (Contributor+) Local File Inclusion

  catchthemes · Catch Dark Mode

  High7.5
• CVE-2024-44010

  WordPress Full frame theme <= 2.7.2 - Cross Site Scripting (XSS) vulnerability

  catchthemes · Full frame

  Medium5.1
• CVE-2024-47313

  WordPress Catch Base theme <= 3.4.6 - Cross Site Scripting (XSS) vulnerability

  catchthemes · Catch Base

  Medium5.1
• CVE-2024-47356

  WordPress Create theme <= 2.9.1 - Cross Site Scripting (XSS) vulnerability

  catchthemes · Create

  Medium5.1
• CVE-2021-24752

  Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change

  CatchThemes · Essential Widgets

  Medium5.7