CVE-2021-24752

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2021
Source publication: Oct 18, 2021
Source updated: Aug 3, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change

Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctp_switch AJAX action, which could allow any authenticated users, such as Subscriber to change the Essential Widgets WordPress plugin before 1.9, To Top WordPress plugin before 2.3, Header Enhancement WordPress plugin before 1.5, Generate Child Theme WordPress plugin before 1.6, Essential Content Types WordPress plugin before 1.9, Catch Web Tools WordPress plugin before 2.7, Catch Under Construction WordPress plugin before 1.4, Catch Themes Demo Import WordPress plugin before 1.6, Catch Sticky Menu WordPress plugin before 1.7, Catch Scroll Progress Bar WordPress plugin before 1.6, Social Gallery and Widget WordPress plugin before 2.3, Catch Infinite Scroll WordPress plugin before 1.9, Catch Import Export WordPress plugin before 1.9, Catch Gallery WordPress plugin before 1.7, Catch Duplicate Switcher WordPress plugin before 1.6, Catch Breadcrumb WordPress plugin before 1.7, Catch IDs WordPress plugin before 2.4's configurations.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Essential Widgets

Vendor: CatchThemes
Product: Essential Widgets
Platforms: Unknown
Default status: Unknown

Essential Widgets · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.9	`affected`	custom	1.9	Unavailable	None listed

To Top

Vendor: CatchThemes
Product: To Top
Platforms: Unknown
Default status: Unknown

To Top · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.3	`affected`	custom	2.3	Unavailable	None listed

Header Enhancement

Vendor: CatchThemes
Product: Header Enhancement
Platforms: Unknown
Default status: Unknown

Header Enhancement · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.5	`affected`	custom	1.5	Unavailable	None listed

Generate Child Theme

Vendor: CatchThemes
Product: Generate Child Theme
Platforms: Unknown
Default status: Unknown

Generate Child Theme · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.6	`affected`	custom	1.6	Unavailable	None listed

Essential Content Types

Vendor: CatchThemes
Product: Essential Content Types
Platforms: Unknown
Default status: Unknown

Essential Content Types · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.9	`affected`	custom	1.9	Unavailable	None listed

Catch Web Tools

Vendor: CatchThemes
Product: Catch Web Tools
Platforms: Unknown
Default status: Unknown

Catch Web Tools · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.7	`affected`	custom	2.7	Unavailable	None listed

Catch Under Construction

Vendor: CatchThemes
Product: Catch Under Construction
Platforms: Unknown
Default status: Unknown

Catch Under Construction · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.4	`affected`	custom	1.4	Unavailable	None listed

Catch Themes Demo Import

Vendor: CatchThemes
Product: Catch Themes Demo Import
Platforms: Unknown
Default status: Unknown

Catch Themes Demo Import · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.6	`affected`	custom	1.6	Unavailable	None listed

Catch Sticky Menu

Vendor: CatchThemes
Product: Catch Sticky Menu
Platforms: Unknown
Default status: Unknown

Catch Sticky Menu · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.7	`affected`	custom	1.7	Unavailable	None listed

Catch Scroll Progress Bar

Vendor: CatchThemes
Product: Catch Scroll Progress Bar
Platforms: Unknown
Default status: Unknown

Catch Scroll Progress Bar · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.6	`affected`	custom	1.6	Unavailable	None listed

Social Gallery and Widget

Vendor: CatchThemes
Product: Social Gallery and Widget
Platforms: Unknown
Default status: Unknown

Social Gallery and Widget · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.3	`affected`	custom	2.3	Unavailable	None listed

Catch Infinite Scroll

Vendor: CatchThemes
Product: Catch Infinite Scroll
Platforms: Unknown
Default status: Unknown

Catch Infinite Scroll · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.9	`affected`	custom	1.9	Unavailable	None listed

Catch Import Export

Vendor: CatchThemes
Product: Catch Import Export
Platforms: Unknown
Default status: Unknown

Catch Import Export · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.9	`affected`	custom	1.9	Unavailable	None listed

Catch Gallery

Vendor: CatchThemes
Product: Catch Gallery
Platforms: Unknown
Default status: Unknown

Catch Gallery · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.7	`affected`	custom	1.7	Unavailable	None listed

Catch Duplicate Switcher

Vendor: CatchThemes
Product: Catch Duplicate Switcher
Platforms: Unknown
Default status: Unknown

Catch Duplicate Switcher · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.6	`affected`	custom	1.6	Unavailable	None listed

Catch Breadcrumb

Vendor: CatchThemes
Product: Catch Breadcrumb
Platforms: Unknown
Default status: Unknown

Catch Breadcrumb · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.7	`affected`	custom	1.7	Unavailable	None listed

Catch IDs

Vendor: CatchThemes
Product: Catch IDs
Platforms: Unknown
Default status: Unknown

Catch IDs · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.4	`affected`	custom	2.4	Unavailable	None listed