Approved changes feed: RSS · Atom

cpe:2.3:a:ctltwp:section_widget:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCtltwp (59476dfa-b6bb-5985-92f8-562387c1c51a)
ProductSection Widget (74a427e7-e35f-529e-8290-84626860ac13)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-46537 vulnerable 2026-06-08 07:27:08.393637 WordPress Section Widget plugin <= 3.3.1 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ctltwp Section Widget section-widget allows Reflected XSS.This issue affects Section Widget: from n/a through <= 3.3.1.
Published: 2025-05-23T12:43:37.977Z
Updated: 2026-04-28T16:12:40.110Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-46441 vulnerable 2026-06-08 07:27:08.248643 WordPress Section Widget plugin <= 3.3.1 - Path Traversal vulnerability
MEDIUM (5.3)
Path Traversal: '.../...//' vulnerability in ctltwp Section Widget section-widget allows Path Traversal.This issue affects Section Widget: from n/a through <= 3.3.1.
Published: 2025-05-19T19:42:37.039Z
Updated: 2026-04-28T16:12:37.423Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.