catchthemes

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

catchthemes records in CISA KEV

No catchthemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Catch Base 1 record LOW Catch Dark Mode 1 record MEDIUM Create 1 record LOW Darcie 1 record LOW Essential Widgets 1 record LOW Full Frame 1 record LOW

Records

1 record in Essential Widgets · all components

TI-2025-41297 CVE-2025-67543 · GHSA-2wqc-47g4-pm22

WordPress Essential Widgets plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Catch Themes Essential Widgets essential-widgets allows Stored XSS.This issue affects Essential Widgets: from n/a thro…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00196 Published 2025-12-09 No fix listed CWE-79

Open these records in search →

Critical	0
High	4
Medium	6
Low	0
No CVSS	0