CatchThemes
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Essential Widgets | 2 | – | Feb 5, 2026 |
| Catch Breadcrumb | 1 | – | Oct 18, 2021 |
| Catch Dark Mode | 1 | – | Sep 17, 2025 |
| Catch Duplicate Switcher | 1 | – | Oct 18, 2021 |
| Catch Gallery | 1 | – | Oct 18, 2021 |
| Catch IDs | 1 | – | Oct 18, 2021 |
| Catch Import Export | 1 | – | Oct 18, 2021 |
| Catch Infinite Scroll | 1 | – | Oct 18, 2021 |
| Catch Scroll Progress Bar | 1 | – | Oct 18, 2021 |
| Catch Sticky Menu | 1 | – | Oct 18, 2021 |
| Catch Themes Demo Import | 1 | – | Oct 18, 2021 |
| Catch Under Construction | 1 | – | Oct 18, 2021 |
| Catch Web Tools | 1 | – | Oct 18, 2021 |
| Create | 1 | – | Oct 6, 2024 |
| Essential Content Types | 1 | – | Oct 18, 2021 |
| Full frame | 1 | – | Oct 6, 2024 |
| Generate Child Theme | 1 | – | Oct 18, 2021 |
| Header Enhancement | 1 | – | Oct 18, 2021 |
| Social Gallery and Widget | 1 | – | Oct 18, 2021 |
| Catch Base | 1 | – | Oct 6, 2024 |
| To Top | 1 | – | Oct 18, 2021 |
Exploited and recent CVEs
- CVE-2026-0867 Essential Widgets <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes 0.3%
- CVE-2025-10143 Catch Dark Mode <= 2.0 - Authenticated (Contributor+) Local File Inclusion 1.0%
- CVE-2024-44010 WordPress Full frame theme <= 2.7.2 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2024-47313 WordPress Catch Base theme <= 3.4.6 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2024-47356 WordPress Create theme <= 2.9.1 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2021-24752 Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change 0.4%
- CVE-2021-24752 Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change 0.4%
- CVE-2021-24752 Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change 0.4%
- CVE-2021-24752 Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change 0.4%
- CVE-2021-24752 Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change 0.4%
- CVE-2021-24752 Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change 0.4%
- CVE-2021-24752 Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change 0.4%
- CVE-2021-24752 Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change 0.4%
- CVE-2021-24752 Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change 0.4%
- CVE-2021-24752 Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change 0.4%
- CVE-2021-24752 Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change 0.4%
- CVE-2021-24752 Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change 0.4%
- CVE-2021-24752 Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change 0.4%
- CVE-2021-24752 Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change 0.4%
- CVE-2021-24752 Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change 0.4%
- CVE-2021-24752 Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change 0.4%
- CVE-2021-24752 Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change 0.4%