catchplugins vulnerabilities

Recent CVEs affecting catchplugins products. 2 tracked.

catchplugins has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2021-10-21. Highest priority: CVE-2021-39352 (score 55/100).

• CVE-2021-39352 HIGH 7.2 UPGRADE The Catch Themes Demo Import WordPress plugin is vulnerable to arbitrary file uploads via the import functiona
• CVE-2021-24752 MEDIUM 5.7 UPGRADE UPGRADE Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctp_switch AJAX

FAQ

How do I fix catchplugins vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is catchplugins being exploited right now?

None of the tracked catchplugins CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which catchplugins CVE should I patch first?

CVE-2021-39352 currently ranks highest (55/100): The Catch Themes Demo Import WordPress plugin is vulnerable to arbitrary file uploads via the import functiona.

Products

• catch scroll progress bar
• catch sticky menu
• catch themes demo import
• catch under construction
• catch web tools
• essential content types

← Back to latest CVEs