CVE-2025-10143 | Catch Dark Mode Plugin up to 2.0 on WordPress Shortcode catch_dark_mode file inclusion

September 16, 2025 Yanac

A vulnerability categorized as critical has been discovered in Catch Dark Mode Plugin up to 2.0 on WordPress. This issue affects the function catch_dark_mode of the component Shortcode Handler. The manipulation results in file inclusion.

This vulnerability is known as CVE-2025-10143. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More