Known vulnerabilities in CatchThemes Essential Widgets
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-0867 | The Essential Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ew-author,… | 6.4 Medium | Feb 5, 2026 |
| CVE-2021-24752 | Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctp_switch AJAX action,… | Not rated | Oct 18, 2021 |