Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

catchthemes vulnerabilities

6 published CVEs name catchthemes among the affected products.

Newest CVEs

  • CVE-2026-0867

    Essential Widgets <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes

    catchthemes · Essential Widgets

    Medium6.4
  • CVE-2025-10143

    Catch Dark Mode <= 2.0 - Authenticated (Contributor+) Local File Inclusion

    catchthemes · Catch Dark Mode

    High7.5
  • CVE-2024-44010

    WordPress Full frame theme <= 2.7.2 - Cross Site Scripting (XSS) vulnerability

    catchthemes · Full frame

    Medium5.1
  • CVE-2024-47313

    WordPress Catch Base theme <= 3.4.6 - Cross Site Scripting (XSS) vulnerability

    catchthemes · Catch Base

    Medium5.1
  • CVE-2024-47356

    WordPress Create theme <= 2.9.1 - Cross Site Scripting (XSS) vulnerability

    catchthemes · Create

    Medium5.1
  • CVE-2021-24752

    Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change

    CatchThemes · Essential Widgets

    Medium5.7