Skip to content
OpenAdvisories

Vendor

catchthemes

6 known vulnerabilities.

Products

Essential Widgets 2 To Top 1 Header Enhancement 1 Full frame 1 Generate Child Theme 1 Essential Content Types 1 Catch Web Tools 1 Catch Under Construction 1 Catch Themes Demo Import 1 Catch Sticky Menu 1 Catch Scroll Progress Bar 1 Social Gallery and Widget 1 Catch Infinite Scroll 1 Catch Import Export 1 Catch Gallery 1 Catch Duplicate Switcher 1 Catch Breadcrumb 1 Catch IDs 1 Catch Dark Mode 1 Catch Base 1 Create 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-0867

    Essential Widgets <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes

    The Essential Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ew-author, ew-archive, ew-category, ew-page, and ew-menu shortcodes in all versions up to, and including, 3.0 due to insufficient input sanitization and o…

    catchthemes Essential Widgets Web / CMS
  • Medium 5.1
    CVE-2024-44010

    WordPress Full frame theme <= 2.7.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchthemes Full frame full-frame allows Stored XSS.This issue affects Full frame: from n/a through <= 2.7.2.

    catchthemes Full frame
  • Medium 5.1
    CVE-2024-47313

    WordPress Catch Base theme <= 3.4.6 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchthemes Catch Base catch-base allows Stored XSS.This issue affects Catch Base: from n/a through <= 3.4.6.

    catchthemes Catch Base
  • Medium 5.1
    CVE-2024-47356

    WordPress Create theme <= 2.9.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchthemes Create create allows Stored XSS.This issue affects Create: from n/a through <= 2.9.1.

    catchthemes Create