VYPR

Section Widget

by WordPress

Source repositories

CVEs (2)

  • CVE-2025-46537HigMay 23, 2025
    risk 0.46cvss 7.1epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ctltwp Section Widget section-widget allows Reflected XSS.This issue affects Section Widget: from n/a through <= 3.3.1.

  • CVE-2025-46441MedMay 19, 2025
    risk 0.34cvss 5.3epss 0.00

    Path Traversal: '.../...//' vulnerability in ctltwp Section Widget section-widget allows Path Traversal.This issue affects Section Widget: from n/a through <= 3.3.1.