CatchThemes Essential Widgets

• CVE-2026-0867 Medium 6.4 Essential Widgets <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes 0.3%
• CVE-2021-24752 Unrated Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change 0.4%