Skip to content
OpenAdvisories

Vendor

Catch Themes

4 known vulnerabilities.

Products

Catch Duplicate Switcher 1 Catch Dark Mode 1 Essential Widgets 1 Darcie 1 Create 0
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2025-67543

    WordPress Essential Widgets plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Catch Themes Essential Widgets essential-widgets allows Stored XSS.This issue affects Essential Widgets: from n/a through <= 2.2.2.

    Catch Themes Essential Widgets