WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
catch-breadcrumb
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-dark-mode
Published
2025-04-04
Title
Catch Dark Mode < 2.1 - Contributor+ Local File Inclusion
Slug
catch-dark-mode
Published
2025-09-16
Title
Catch Dark Mode < 2.0.1 - Authenticated (Contributor+) Local File Inclusion
Slug
catch-duplicate-switcher
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-duplicate-switcher
Published
2025-01-16
Title
Catch Duplicate Switcher <= 2.0 - Reflected Cross-Site Scripting
Slug
catch-gallery
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-ids
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-import-export
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-infinite-scroll
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-instagram-feed-gallery-widget
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-popup
Published
2024-12-11
Title
Catch Popup <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
catch-scroll-progress-bar
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-sticky-menu
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-themes-demo-import
Published
2021-10-21
Title
Catch Themes Demo Import < 1.8 - Admin+ Arbitrary File Upload
Slug
catch-themes-demo-import
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-themes-demo-import
Published
2022-02-07
Title
Catch Themes Demo Import < 2.1.1 - Admin+ Remote Code Execution
Slug
catch-under-construction
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-web-tools
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
catch-web-tools
Published
2022-01-24
Title
Catch Web Tools < 2.7.1 - Subscriber+ Arbitrary Catch IDs Activation/Deactivation
Slug
catchers-helpdesk
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
categories-gallery
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
categories-gallery-woocommerce
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
categories-images
Published
2026-04-17
Title
Categories Images < 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'z_taxonomy_image' Shortcode
Slug
categories-images
Published
2026-03-14
Title
Categories Images < 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
categorify
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius