Threat Investigation
Request a demo

CVE-2021-24752

Medium

Description

Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctp_switch AJAX action, which could allow any authenticated users, such as Subscriber to change the Essential Widgets WordPress plugin before 1.9, To Top WordPress plugin before 2.3, Header Enhancement WordPress plugin before 1.5, Generate Child Theme WordPress plugin before 1.6, Essential Content Types WordPress plugin before 1.9, Catch Web Tools WordPress plugin before 2.7, Catch Under Construction WordPress plugin before 1.4, Catch Themes Demo Import WordPress plugin before 1.6, Catch Sticky Menu WordPress plugin before 1.7, Catch Scroll Progress Bar WordPress plugin before 1.6, Social Gallery and Widget WordPress plugin before 2.3, Catch Infinite Scroll WordPress plugin before 1.9, Catch Import Export WordPress plugin before 1.9, Catch Gallery WordPress plugin before 1.7, Catch Duplicate Switcher WordPress plugin before 1.6, Catch Breadcrumb WordPress plugin before 1.7, Catch IDs WordPress plugin before 2.4's configurations.

SeverityMedium
CVSS5.7
Exploit probability—
ProductCatchplugins Catch Scroll Progress Bar
PublishedOct 18, 2021
First seenOct 18, 2021
Weakness typeCWE-284Improper access control

How to fix

Update
  • catchplugins catch_scroll_progress_bar1.6 or later
  • catchplugins catch_sticky_menu1.7 or later
  • catchplugins catch_themes_demo_import1.6 or later
  • catchplugins catch_under_construction1.4 or later
  • catchplugins catch_web_tools2.7 or later
  • catchplugins essential_content_types1.9 or later
  • catchplugins essential_widgets1.9 or later
  • catchplugins generate_child_theme1.6 or later
  • catchplugins header_enhancement1.5 or later
  • catchplugins to_top2.3 or later

Affected products

ProductAffected versionsFixed in
catchplugins catch_scroll_progress_barv < 1.61.6
catchplugins catch_sticky_menuv < 1.71.7
catchplugins catch_themes_demo_importv < 1.61.6
catchplugins catch_under_constructionv < 1.41.4
catchplugins catch_web_toolsv < 2.72.7
catchplugins essential_content_typesv < 1.91.9
catchplugins essential_widgetsv < 1.91.9
catchplugins generate_child_themev < 1.61.6
catchplugins header_enhancementv < 1.51.5
catchplugins to_topv < 2.32.3

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.