Skip to content
OpenAdvisories

Product · Catch Themes

Catch Dark Mode

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2025-10143

    Catch Dark Mode <= 2.0 - Authenticated (Contributor+) Local File Inclusion

    The Catch Dark Mode plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0 via the 'catch_dark_mode' shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to inclu…

    Catch Themes Catch Dark Mode Web / CMS
  • High 7.5
    CVE-2025-32154

    WordPress Catch Dark Mode plugin <= 2.0.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Catch Themes Catch Dark Mode catch-dark-mode allows PHP Local File Inclusion.This issue affects Catch Dark Mode: from n/a through <= 2.0.1.

    Catch Themes Catch Dark Mode