Sidebar Manager Light Vulnerabilities

The Sidebar Manager Light plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.18. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick a site...

CVSS:

4.3

Affected:

up to 1.18

Fix:

No patched version reported

Disclosed:

May 7, 2025

CVE-2025-47647 on NVD →

[en] Cross-Site Request Forgery (CSRF) vulnerability in OTWthemes Sidebar Manager Light allows Cross Site Request Forgery. This issue affects Sidebar Manager Light: from n/a through 1.18.

Affected:

up to 1.18

Fix:

No patched version reported

Disclosed:

May 7, 2025

CVE-2025-47647 on NVD →

The Sidebar Manager Light plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.8. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forge...

CVSS:

6.1

Affected:

up to 1.1.8

Fix:

No patched version reported

Disclosed:

Apr 4, 2025

CVE-2025-32112 on NVD →

[en] Cross-Site Request Forgery (CSRF) vulnerability in OTWthemes Sidebar Manager Light allows Cross Site Request Forgery. This issue affects Sidebar Manager Light: from n/a through 1.1.8.

Affected:

up to 1.18

Fix:

No patched version reported

Disclosed:

Apr 4, 2025

CVE-2025-32112 on NVD →