OTWthemes vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 202516
3. 20261

Newest CVEs

• CVE-2026-76562

  Sidebar Manager Light <= 1.18 - Unauthenticated Stored Cross-Site Scripting via 'sbm_description' Parameter

  otwthemes · Sidebar Manager Light

  High7.2
• CVE-2025-69007

  WordPress Popping Sidebars and Widgets Light plugin <= 1.27 - Cross Site Scripting (XSS) vulnerability

  OTWthemes · Popping Sidebars and Widgets Light

  Medium5.9
• CVE-2025-58853

  WordPress Popping Sidebars and Widgets Light Plugin <= 1.27 - Cross Site Request Forgery (CSRF) Vulnerability

  OTWthemes · Popping Sidebars and Widgets Light

  High7.1
• CVE-2025-58805

  WordPress Widgetize Pages Light Plugin <= 3.0 - Cross Site Scripting (XSS) Vulnerability

  OTWthemes · Widgetize Pages Light

  Medium5.9
• CVE-2025-24771

  WordPress Content Manager Light plugin <= 3.2 - Reflected Cross Site Scripting (XSS) vulnerability

  OTWthemes · Content Manager Light

  High7.1
• CVE-2025-30942

  WordPress Post Custom Templates Lite plugin <= 1.14 - Cross Site Scripting (XSS) Vulnerability

  OTWthemes · Post Custom Templates Lite

  Medium5.9
• CVE-2025-30995

  WordPress Widgetize Pages Light plugin <= 3.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

  OTWthemes · Widgetize Pages Light

  High7.1
• CVE-2025-47647

  WordPress Sidebar Manager Light plugin <= 1.18 - Cross Site Request Forgery (CSRF) Vulnerability

  OTWthemes · Sidebar Manager Light

  Medium4.3
• CVE-2025-32115

  WordPress Popping Content Light plugin <= 2.4 - Reflected Cross Site Scripting (XSS) vulnerability

  OTWthemes · Popping Content Light

  High7.1
• CVE-2025-32117

  WordPress Widgetize Pages Light plugin <= 3.0 - Reflected Cross Site Scripting (XSS) vulnerability

  OTWthemes · Widgetize Pages Light

  High7.1