Read the docs

ctltwp

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

ctltwp records in CISA KEV

No ctltwp vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2025-29255 CVE-2025-46537 · GHSA-9h8v-w795-r85q

WordPress Section Widget plugin <= 3.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ctltwp Section Widget section-widget allows Reflected XSS.This issue affects Section Widget: from n/a through <= 3.3.1…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00279 Published 2025-05-23 No fix listed CWE-79
TI-2025-29159 CVE-2025-46441 · GHSA-m7rf-rfhp-h3m3

WordPress Section Widget plugin <= 3.3.1 - Path Traversal vulnerability

Priority LOW 30

Path Traversal: '.../...//' vulnerability in ctltwp Section Widget section-widget allows Path Traversal.This issue affects Section Widget: from n/a through <= 3.3.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00398 Published 2025-05-19 No fix listed CWE-35
TI-2025-18408 CVE-2025-24691 · GHSA-7qcj-rrpq-j8w7

WordPress People Lists plugin <= 1.3.10 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in ctltwp People Lists people-lists allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects People Lists: from n/a through <= 1.3.10.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00414 Published 2025-01-24 No fix listed CWE-862
Open these records in search →