Skip to content
OpenAdvisories
High · 7.1 CVE-2025-46537 EUVD-2025-28061GHSA-9h8v-w795-r85q

WordPress Section Widget plugin <= 3.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Published May 23, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ctltwp Section Widget section-widget allows Reflected XSS.This issue affects Section Widget: from n/a through <= 3.3.1.

Affected products

VendorProductAffectedFixed
ctltwp Section Widget ≤ 3.3.1 —

References