CatchThemes records
6 published records for vendor catchthemes.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2025-32154No exploit | WordPress Catch Dark Mode plugin <= 2.0.1 - Local File Inclusion vulnerabilitycatchthemes · catch dark mode · CWE-98 | High8.8 | — | 1.0% | Apr 4, 2025 |
26Monitor | CVE-2025-67543No exploit | WordPress Essential Widgets plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerabilitycatchthemes · essential widgets · CWE-79 | Medium6.5 | — | 0.2% | Dec 9, 2025 |
24Monitor | CVE-2023-25961No exploit | WordPress Darcie Theme <= 1.1.5 is vulnerable to Cross Site Scripting (XSS)catchthemes · darcie · CWE-79 | Medium6.1 | — | 0.4% | May 4, 2023 |
23Monitor | CVE-2024-47356No exploit | WordPress Create theme <= 2.9.1 - Cross Site Scripting (XSS) vulnerabilitycatchthemes · create · CWE-79 | Medium5.9 | — | 0.2% | Oct 6, 2024 |
20Monitor | CVE-2024-44010No exploit | WordPress Full frame theme <= 2.7.2 - Cross Site Scripting (XSS) vulnerabilitycatchthemes · full frame · CWE-79 | Medium5.1 | — | 0.2% | Oct 6, 2024 |
19Monitor | CVE-2024-47313No exploit | WordPress Catch Base theme <= 3.4.6 - Cross Site Scripting (XSS) vulnerabilitycatchthemes · catch base · CWE-79 | Medium4.8 | — | 0.2% | Oct 6, 2024 |
- CVE-2025-3215435Monitor
WordPress Catch Dark Mode plugin <= 2.0.1 - Local File Inclusion vulnerability
HighCVSS 8.8No exploitEPSS 1%catchthemes · catch dark modeApr 4, 2025
- CVE-2025-6754326Monitor
WordPress Essential Widgets plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.5No exploitEPSS 0%catchthemes · essential widgetsDec 9, 2025
- CVE-2023-2596124Monitor
WordPress Darcie Theme <= 1.1.5 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 6.1No exploitEPSS 0%catchthemes · darcieMay 4, 2023
- CVE-2024-4735623Monitor
WordPress Create theme <= 2.9.1 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.9No exploitEPSS 0%catchthemes · createOct 6, 2024
- CVE-2024-4401020Monitor
WordPress Full frame theme <= 2.7.2 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.1No exploitEPSS 0%catchthemes · full frameOct 6, 2024
- CVE-2024-4731319Monitor
WordPress Catch Base theme <= 3.4.6 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 4.8No exploitEPSS 0%catchthemes · catch baseOct 6, 2024