TI-2021-07034 CVE-2021-24752 · GHSA-qcgq-c97q-26vw
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Priority LOW 26
Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctp_switch AJAX action, which could allow any authenticated users, such as Subscriber to change the Essential Widgets WordPres…