ctltwp

Products

ProductCVEsExploitedLatest
Section Widget2–May 23, 2025
People Lists1–Jan 24, 2025
Wiki Embed1–May 7, 2025

Exploited and recent CVEs

  • CVE-2025-46537 High 7.1 WordPress Section Widget plugin <= 3.3.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-46441 Medium 5.3 WordPress Section Widget plugin <= 3.3.1 - Path Traversal vulnerability 0.4%
  • CVE-2025-47551 Medium 4.3 WordPress Wiki Embed plugin <= 1.4.6 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability 0.2%
  • CVE-2025-24691 Medium 4.3 WordPress People Lists plugin <= 1.3.10 - Broken Access Control vulnerability 0.4%