PatchTheCVEcatch themes demo import vulnerabilities and fixes
Recent CVEs affecting catch themes demo import, with upgrade or downgrade steps. 2 tracked.
Also searched as: catchthemesdemoimport.
catch themes demo import has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2021-10-21. Highest priority: CVE-2021-39352 (score 55/100).
- CVE-2021-39352 HIGH 7.2 UPGRADE The Catch Themes Demo Import WordPress plugin is vulnerable to arbitrary file uploads via the import functiona
- CVE-2021-24752 MEDIUM 5.7 UPGRADE UPGRADE Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctp_switch AJAX
FAQ
How do I fix catch themes demo import vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is catch themes demo import being exploited right now?
None of the tracked catch themes demo import CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which catch themes demo import CVE should I patch first?
CVE-2021-39352 currently ranks highest (55/100): The Catch Themes Demo Import WordPress plugin is vulnerable to arbitrary file uploads via the import functiona.