Catch Themes vulnerabilities
We track 2 vulnerabilities in Catch Themes products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 4, 2025.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest Catch Themes vulnerabilities
- 8.8 High severity
Catch Dark Mode: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Catch Themes Catch Dark Mode catch-dark-mode allows PHP Local File Inclusion.This issue affects Catch Dark Mode: from n/a through <= 2.0.1.
- 7.1 High severity
Catch Duplicate Switcher: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Catch Themes Catch Duplicate Switcher catch-duplicate-switcher allows Reflected XSS.This issue affects Catch Duplicate Switcher: from n/a through <= 2.0.