Vulnerabilities in Catch Plugins software