TI-2025-23252 CVE-2025-32154 · GHSA-xhfj-7xhw-r6pjWordPress Catch Dark Mode plugin <= 2.0.1 - Local File Inclusion vulnerabilityPriority MEDIUM 42Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Catch Themes Catch Dark Mode catch-dark-mode allows PHP Local File Inclusion.This issue affects Cat…CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00988 · Published 2025-04-04 · No fix listed CWE-98