Product

catchthemes Essential Content Types vulnerabilities

1 published CVE affecting catchthemes Essential Content Types, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest catchthemes Essential Content Types CVEs

Newest publication first

CVE-2021-24752 Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Published 2021-10-18

MediumCVSS 5.7 EPSS 0.42%

Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctp_switch AJAX action, which could allow any authenticated users, such as Subscriber to change the Essential Widgets WordPress plugin before 1.9, To Top WordPress plugin before 2.3, Hea...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

catchthemes Essential Content Types vulnerabilities

Latest catchthemes Essential Content Types CVEs

CVE-2021-24752 Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change