CVE-2026-15336 | catchplugins Catch Themes Demo Import Plugin up to 3.3 on WordPress Plugin Activation catch_themes_demo_import_activate_plugin missing authentication

July 16, 2026 Yanac

A vulnerability described as critical has been identified in catchplugins Catch Themes Demo Import Plugin up to 3.3 on WordPress. This impacts the function catch_themes_demo_import_activate_plugin of the component Plugin Activation. Such manipulation of the argument activate_plugin leads to missing authentication.

This vulnerability is traded as CVE-2026-15336. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More