Otwthemes vulnerabilities

Products

• Widgetize Pages Light 4
• Sidebar Manager Light 3
• Buttons Shortcode And Widget 2
• Content Manager Light 2
• Popping Sidebars And Widgets Light 2
• Post Custom Templates Lite 2

Newest

• otwthemes sidebar manager light Sidebar Manager Light <= 1.18 - Unauthenticated Stored Cross-Site Scripting via 'sbm_description' Parameter CVE-2026-76562 7.2 HighSeptember 10, 2026
• otwthemes popping sidebars and widgets light WordPress Popping Sidebars and Widgets Light plugin <= 1.27 - Cross Site Scripting (XSS) vulnerability CVE-2025-69007 5.9 MediumDecember 30, 2025
• otwthemes popping sidebars and widgets light WordPress Popping Sidebars and Widgets Light Plugin <= 1.27 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-58853 7.1 HighSeptember 5, 2025
• otwthemes widgetize pages light WordPress Widgetize Pages Light Plugin <= 3.0 - Cross Site Scripting (XSS) Vulnerability CVE-2025-58805 5.9 MediumSeptember 5, 2025
• otwthemes content manager light WordPress Content Manager Light plugin <= 3.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-24771 7.1 HighJuly 4, 2025
• otwthemes post custom templates lite WordPress Post Custom Templates Lite plugin <= 1.14 - Cross Site Scripting (XSS) Vulnerability CVE-2025-30942 5.9 MediumJune 6, 2025
• otwthemes widgetize pages light WordPress Widgetize Pages Light plugin <= 3.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability CVE-2025-30995 7.1 HighJune 6, 2025
• otwthemes sidebar manager light WordPress Sidebar Manager Light plugin <= 1.18 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-47647 4.3 MediumMay 7, 2025
• otwthemes popping content light WordPress Popping Content Light plugin <= 2.4 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-32115 7.1 HighApril 10, 2025
• otwthemes widgetize pages light WordPress Widgetize Pages Light plugin <= 3.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-32117 7.1 HighApril 8, 2025
• otwthemes sidebar manager light WordPress Sidebar Manager Light plugin <= 1.18 - CSRF to Stored XSS vulnerability CVE-2025-32112 7.1 HighApril 4, 2025
• otwthemes widget manager light WordPress Widget Manager Light plugin <= 1.18 - Broken Access Control vulnerability CVE-2025-31768 6.5 MediumApril 3, 2025
• otwthemes content manager light WordPress Content Manager Light plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability CVE-2025-31770 6.5 MediumApril 1, 2025
• otwthemes post custom templates lite WordPress Post Custom Templates Lite plugin <= 1.14 - Stored Cross Site Scripting (XSS) vulnerability CVE-2025-31767 6.5 MediumApril 1, 2025
• otwthemes info boxes shortcode and widget WordPress Info Boxes Shortcode And Widgets plugin <= 1.15 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-30541 4.3 MediumMarch 24, 2025
• otwthemes widgetize pages light WordPress Widgetize Pages Light plugin <= 3.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-22313 7.1 HighJanuary 9, 2025
• otwthemes toggles shortcode and widget Toggles Shortcode and Widget <= 1.14 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2024-12207 4.4 MediumJanuary 7, 2025
• otwthemes buttons shortcode and widget Buttons Shortcode and Widget <= 1.16 - Stored XSS via shortcode CVE-2024-0711 6.1 MediumMarch 18, 2024
• otwthemes tabs shortcode and widget Tabs Shortcode and Widget <= 1.17 - Contributor+ Stored Cross-Site Scripting CVE-2024-0719 5.4 MediumMarch 18, 2024
• otwthemes buttons shortcode and widget WordPress Buttons Shortcode and Widget Plugin <= 1.16 is vulnerable to Cross Site Scripting (XSS) CVE-2024-24930 6.5 MediumFebruary 12, 2024
• otwthemes blog manager light WordPress Blog Manager Light Plugin <= 1.20 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-45102 5.4 MediumOctober 12, 2023