Catchthemes Essential Widgets
2 CVEs affecting Catchthemes Essential Widgets. Latest disclosed: 2026-02-05. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-0867 | Medium | 6.4 | 2026-02-05 | The Essential Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ew-author, ew-archive, ew-category, ew-page, and ew-me… |
CVE-2021-24752 | Medium | 5.7 | 2021-10-18 | Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctp_switch AJAX action, which could allow any authenticated users… |