plugin

Catch Breadcrumb Vulnerabilities

2 known security issues reported for the Catch Breadcrumb WordPress plugin. Most recent disclosed Sep 20, 2021.

2 medium

Running Catch Breadcrumb on your site? Check whether your installed version is affected.

Scan your site free

CatchThemes Plugins (Various Versions) - Missing Authorization

medium

Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctp_switch AJAX action, which could allow any authenticated users, such as Subscriber to change the Essential Widgets WordPress plugin before 1.9, To Top WordPress plugin before 2.3, Header Enhancement WordPress plugin before...

CVSS:
5.4
Affected:
up to 1.7
Fixed in:
1.7
Disclosed:
Sep 20, 2021

CVE-2021-24752 on NVD →

Catch Breadcrumb <= 1.5.4 - Reflected Cross-Site Scripting

medium

The Catch Breadcrumb plugin before 1.5.4 for WordPress allows Reflected XSS via the s parameter (a search query). Also affected are 16 themes (if the plugin is enabled) by the same author: Alchemist and Alchemist PRO, Izabel and Izabel PRO, Chique and Chique PRO, Clean Enterprise and Clean Enterprise PRO, Bold Photogra...

CVSS:
6.1
Affected:
up to 1.5.5
Fixed in:
1.5.5
Disclosed:
Apr 22, 2020

CVE-2020-12054 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database