Custom Sidebars Vulnerabilities

[en] The custom-sidebars plugin before 3.1.0 for WordPress has CSRF related to set location, import actions, and export actions.

Affected:

up to 3.1.0

Fixed in:

3.1.0

Disclosed:

Aug 14, 2019

CVE-2017-18510 on NVD →

[en] The custom-sidebars plugin before 3.0.8.1 for WordPress has CSRF.

Affected:

up to 3.0.8.1

Fixed in:

3.0.8.1

Disclosed:

Aug 14, 2019

CVE-2017-18511 on NVD →

The custom-sidebars plugin before 3.1.0 for WordPress has CSRF related to set location, import actions, and export actions.

CVSS:

8.8

Affected:

up to 3.0.9

Fixed in:

3.1.0

Disclosed:

Oct 4, 2017

CVE-2017-18510 on NVD →

The custom-sidebars plugin before 3.0.8.1 for WordPress has CSRF.

CVSS:

8.8

Affected:

up to 3.0.8

Fixed in:

3.0.8.1

Disclosed:

Jun 29, 2017

CVE-2017-18511 on NVD →

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Update the plugin.

Affected:

up to 2.1.0.2

Fixed in:

2.1.0.2

Disclosed:

Jan 13, 2015

The Custom Sidebars plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the cs-msg parameter in versions up to, and including, 2.1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execu...

CVSS:

6.1

Affected:

up to 2.1.0.2

Fixed in:

2.1.0.2

Disclosed:

Jan 11, 2015

The Custom Sidebars plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the cs-msg parameter in versions up to, and including, 2.1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execu...

Affected:

up to 2.1.0.2

Fixed in:

2.1.0.2

Disclosed:

Jan 11, 2015

The Custom Sidebars – Dynamic Widget Area Manager WordPress plugin was affected by a XSS security vulnerability.

Affected:

up to 2.1.0.2

Fixed in:

2.1.0.2