Essential Widgets (Catchplugins) - vulnerabilities (CVEs)

1 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2021-10-18. Vendor: Catchplugins.

CVEs of Essential Widgets

• CVE-2021-24752 - CVSS 5.7 (medium), 2021-10-18: Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctp_switch AJAX action, which could allow any authenticated…