Resources /
WordPress Plugins /
Catch Under Construction
PLUGIN SECURITY
Is Catch Under Construction safe?
This WordPress maintenance mode plugin helps you display informative under construction page in an elegant manner with easy customization
What this plugin does
- Slug:
catch-under-construction
- Author: Catch Plugins
- 100+ active installs
- 5931 all-time downloads
- On WordPress.org since 2019-05-06
coming soonlanding pagemaintenance modemaintenance pageunder construction
Maintenance status
- Last updated: 2026-05-26 5:15am GMT
- Tested up to WordPress: 7.0.2
- Requires PHP: 7.4+
Known vulnerabilities
1 known CVE on file for Catch Under Construction.
Reported between 2021 and 2021.
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2021-24752
|
Catch Under Construction [catch-under-construction] < 1.4 |
Improper Access Control |
Medium
5.7
|
< 1.4
|
1.4 |
2021-09-20 |
—
|
CVE-2021-24752
Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctp_switch AJAX action, which could allow any authenticated users, such as Subscriber to change the Essential Widgets WordPress plugin before 1.9, To Top WordPress plugin before 2.3, Header Enhancement WordPress plugin before 1.5, Generate Child Theme WordPress plugin before 1.6, Essential Content Types WordPress plugin before 1.9, Catch Web Tools WordPress plugin before 2.7, Catch Under Construction WordPress plugin before 1.4, Catch Themes Demo Import WordPress plugin before 1.6, Catch Sticky Menu WordPress plugin before 1.7, Catch Scroll Progress Bar WordPress plugin before 1.6, Social Gallery and Widget WordPress plugin before 2.3, Catch Infinite Scroll WordPress plugin before 1.9, Catch Import Export WordPress plugin before 1.9, Catch Gallery WordPress plugin before 1.7, Catch Duplicate Switcher WordPress plugin before 1.6, Catch Breadcrumb WordPress plugin before 1.7, Catch IDs WordPress plugin before 2.4's configurations.
Source:
CVE.org
How to fix it
Update this plugin to the latest release from wordpress.org — each CVE above lists the exact release that fixed it ("Fixed in") when one is on file.
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.