https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-67543.htmlhttps://patchthecve.com/cve/CVE-2025-67543.htmlWed, 07 Oct 2026 20:10:01 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Catch Themes Essential Widgets essential-widgets allows Stored XSS.This issue affects Essential Widgets: from n/a through <= 2.2.2.https://patchthecve.com/cve/CVE-2025-32154.htmlhttps://patchthecve.com/cve/CVE-2025-32154.htmlWed, 17 Jun 2026 09:11:31 +0000HIGH 7.5: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Catch Themes Catch Dark Mode catch-dark-mode allows PHP Local File Inclusion.This issue affects Catch Dark Mode: from n/a through <= 2.0.1.https://patchthecve.com/cve/CVE-2024-44010.htmlhttps://patchthecve.com/cve/CVE-2024-44010.htmlWed, 17 Jun 2026 07:52:09 +0000MEDIUM 5.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchthemes Full frame full-frame allows Stored XSS.This issue affects Full frame: from n/a through <= 2.7.2.https://patchthecve.com/cve/CVE-2024-47313.htmlhttps://patchthecve.com/cve/CVE-2024-47313.htmlWed, 17 Jun 2026 07:56:51 +0000MEDIUM 5.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchthemes Catch Base catch-base allows Stored XSS.This issue affects Catch Base: from n/a through <= 3.4.6.https://patchthecve.com/cve/CVE-2024-47356.htmlhttps://patchthecve.com/cve/CVE-2024-47356.htmlWed, 17 Jun 2026 07:56:56 +0000MEDIUM 5.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchthemes Create create allows Stored XSS.This issue affects Create: from n/a through <= 2.9.1.