Catch Themes vulnerabilities and threats

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.2%	CVE-2025-67543Essential Widgets (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-12-09CVE Database V5CVE-2025-67543 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Catch Themes Essential Widgets essential-widgets allows Stored XSS.This issue affects Essential Widgets: from n/a through <= 2.2.2. EPSS 0.2%Vulnerability Catch Themes CWE-79	CVE Database V5	2025-12-09
High	7.5	EPSS 1.0%	CVE-2025-32154Catch Dark Mode (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High7.5EPSS 1.0%2025-04-04CVE Database V5CVE-2025-32154 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Catch Themes Catch Dark Mode catch-dark-mode allows PHP Local File Inclusion.This issue affects Catch Dark Mode: from n/a through <= 2.0.1. EPSS 1.0%Vulnerability Catch Themes	CVE Database V5	2025-04-04
High	7.1	EPSS 0.4%	CVE-2025-23619Catch Duplicate Switcher (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.4%2025-03-03CVE Database V5CVE-2025-23619 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Catch Themes Catch Duplicate Switcher catch-duplicate-switcher allows Reflected XSS.This issue affects Catch Duplicate Switcher: from n/a through <= 2.0. EPSS 0.4%Vulnerability Catch Themes	CVE Database V5	2025-03-03

Page 1 of 1