Catchplugins - vulnerabilities (CVEs)
5 CVEs in 11 products, 0 in the last 30 days, newest from 2026-07-16.
Products
- Catch Themes Demo Import - 3 CVEs
- Catch Breadcrumb - 1 CVEs
- Catch Scroll Progress Bar - 1 CVEs
- Catch Sticky Menu - 1 CVEs
- Catch Under Construction - 1 CVEs
- Catch Web Tools - 1 CVEs
- Essential Content Types - 1 CVEs
- Essential Widgets - 1 CVEs
- Generate Child Theme - 1 CVEs
- Header Enhancement - 1 CVEs
- To Top - 1 CVEs
Newest CVEs of Catchplugins
- CVE-2026-15336 - CVSS 4.3 (medium), 2026-07-16: The Catch Themes Demo Import plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.3. This is due to the…
- CVE-2022-0440 - CVSS 7.2 (high), 2022-03-07: The Catch Themes Demo Import WordPress plugin before 2.1.1 does not validate one of the file to be imported, which could allow high privivilege admin to…
- CVE-2021-39352 - CVSS 7.2 (high), 2021-10-21: The Catch Themes Demo Import WordPress plugin is vulnerable to arbitrary file uploads via the import functionality found in the…
- CVE-2021-24752 - CVSS 5.7 (medium), 2021-10-18: Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctp_switch AJAX action, which could allow any authenticated…
- CVE-2020-12054 - CVSS 6.1 (medium), 2020-04-23: The Catch Breadcrumb plugin before 1.5.4 for WordPress allows Reflected XSS via the s parameter (a search query). Also affected are 16 themes (if the plugin…
