Path Traversal Vulnerability in Section Widget by WordPress

CVE-2025-46441

What is CVE-2025-46441?

The Section Widget plugin for WordPress contains a path traversal vulnerability that could allow attackers to exploit file system access. This issue potentially enables unauthorized access to sensitive files outside the intended directory scope. The vulnerability exists in versions from n/a up to and including 3.3.1. It is crucial for users to update their installations and implement security best practices to mitigate risks.

References