catchthemes vulnerabilities
6 published CVEs name catchthemes among the affected products.
- 6Published CVEs6 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-0867
Essential Widgets <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes
catchthemes · Essential Widgets
Medium6.4 - CVE-2025-10143
Catch Dark Mode <= 2.0 - Authenticated (Contributor+) Local File Inclusion
catchthemes · Catch Dark Mode
High7.5 - CVE-2024-44010
WordPress Full frame theme <= 2.7.2 - Cross Site Scripting (XSS) vulnerability
catchthemes · Full frame
Medium5.1 - CVE-2024-47313
WordPress Catch Base theme <= 3.4.6 - Cross Site Scripting (XSS) vulnerability
catchthemes · Catch Base
Medium5.1 - CVE-2024-47356
WordPress Create theme <= 2.9.1 - Cross Site Scripting (XSS) vulnerability
catchthemes · Create
Medium5.1 - CVE-2021-24752
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
CatchThemes · Essential Widgets
Medium5.7