Catchplugins

5 CVEs across 12 Catchplugins products. Browse Catchplugins vulnerabilities, severities, and proof-of-concept exploits.

Catchplugins products with known CVEs

ProductCVEs
Catch Themes Demo Import3
Catch Breadcrumb1
Catch Scroll Progress Bar1
Catch Sticky Menu1
Catch Themes Demo Import1
Catch Under Construction1
Catch Web Tools1
Essential Content Types1
Essential Widgets1
Generate Child Theme1
Header Enhancement1
To Top1
Catchplugins CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-15336Medium4.32026-07-16The Catch Themes Demo Import plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.3. This is due to the catch_themes…
CVE-2022-0440High7.22022-03-07The Catch Themes Demo Import WordPress plugin before 2.1.1 does not validate one of the file to be imported, which could allow high privivilege admin to upload…
CVE-2021-39352High7.22021-10-21The Catch Themes Demo Import WordPress plugin is vulnerable to arbitrary file uploads via the import functionality found in the ~/inc/CatchThemesDemoImport.php…
CVE-2021-24752Medium5.72021-10-18Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctp_switch AJAX action, which could allow any authenticated users…
CVE-2020-12054Medium6.12020-04-23The Catch Breadcrumb plugin before 1.5.4 for WordPress allows Reflected XSS via the s parameter (a search query). Also affected are 16 themes (if the plugin is…