Vulnerabilities in CatchThemes
6 resultsCVE-2025-10143HIGHCatch Dark Mode <= 2.0 - Authenticated (Contributor+) Local File InclusionEPSS 0.6%CVE-2021-24752—Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting ChangeEPSS 0.4%CVE-2026-0867MEDIUMEssential Widgets <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple ShortcodesEPSS 0.3%CVE-2024-47313MEDIUMWordPress Catch Base theme <= 3.4.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2024-47356MEDIUMWordPress Create theme <= 2.9.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2024-44010MEDIUMWordPress Full frame theme <= 2.7.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%