Catch Dark Mode

Catch Dark Mode has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of September 2026. Their average CVSS score is 8.2, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2025 was the busiest year with 2 disclosures.

The most common weakness is PHP Remote File Inclusion, behind 2 of the records (100%).

Every one of the 2 issues recorded for Catch Dark Mode has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Catch Dark Mode is installed on roughly 30 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSHigh
8.2/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Catch Dark Mode vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2025-32154

Catch Dark Mode <= 2.0.1 - Authenticated (Contributor+) Local File Inclusion

Read the full analysis

Vulnerability Records

2 records
Catch Dark Mode banner
Latestv2.2.1

Catch Dark Mode

Catch Themes

Author

Catch Themes

0.0(0)
0/100
Last Updated
2026-05-18 (4mo ago)
Active Installs
30+
Downloads
11,154
Requires WP
5.9+
Requires PHP
7.4+
Tested up to
WP 7.0.4
Created
2021-06-14 (5y ago)

Catch Dark Mode is a Free Dark Mode WordPress plugin that allows you to enable the dark mode option on your WordPress site for your visitors. Your website will look absolutely gorgeous with the available dark and bold color schemes in Catch Dark Mode. The plugin comes with a handful of crucial customization options to make your site extra aesthetic with the dark mode. Features such as 3 different prebuilt ready-to-apply Color Schemes, Floating Switch, OS Awareness, 3 Switch Style Options, 2 Switch Position, and more are available in Catch Dark Mode. Moreover, you have the option to enable the dark mode on your site by default once you install and active the Catch Dark Mode plugin. Also, the plugin adds a responsive floating dark mode switch button on your site that allows your users to click and enable the dark mode version of your site according to their preference. Moreover, you can also enable dark mode by default as well. With all the amazing quick features included, Catch Dark Mode is the ultimate answer if you want to revamp your site with an aesthetic dark version and provide an eye-pleasing user experience. Activate the dark mode for your site with Catch Dark Mode!

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C