Vendor/product archive

catchplugins / to_top CVEs

Beta · best-effort

1 CVEs tagged to catchplugins / to_top — 0 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to catchplugins vendor archive

CVE-2021-24752

Published Oct 18, 2021

Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctp_switch AJAX action, which could allow any authenticated users, such as Subscriber…

CVSS 5.7 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-1 of 1 CVEsPage 1 of 1