What’s Vulnerable › Products

Catch Themes Demo Import vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Catch Themes Demo Import version is affected

Latest Catch Themes Demo Import vulnerabilities

• CVE-2026-15336 — Catch Themes Demo Import <= 3.3 - Missing Authorization to Authenticated (Subscriber+) Single Plugin Installation via 'activate_plugin' Parameter (CVSS 4.3)
• CVE-2022-0440 — Catch Themes Demo Import < 2.1.1 - Admin+ Remote Code Execution (CVSS 7.2)
• CVE-2021-39352 — Catch Themes Demo Import <= 1.7 Admin+ Arbitrary File Upload (CVSS 7.2)
• CVE-2021-24752 — Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change (CVSS 5.7)