OTWthemes vulnerabilities

We track 8 vulnerabilities in OTWthemes products across 5 products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on September 10, 2026.

8vulnerabilities

0critical

8high

0exploited

7.1average CVSS score

Latest OTWthemes vulnerabilities

7.2 High severity
Sidebar Manager Light: Improper Neutralization of Input During Web Page Generation
CVE-2026-76562Sep 10, 2026OTWthemes
The Sidebar Manager Light plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sbm_description' parameter in all versions up to, and including, 1.18 due to insufficient input sanitization and output escaping. This makes it possible for un
7.1 High severity
Popping Sidebars and Widgets Light: Cross-Site Request Forgery
CVE-2025-58853Sep 5, 2025OTWthemes
Cross-Site Request Forgery (CSRF) vulnerability in OTWthemes Popping Sidebars and Widgets Light popping-sidebars-and-widgets-light allows Reflected XSS.This issue affects Popping Sidebars and Widgets Light: from n/a through <= 1.27.
7.1 High severity
Content Manager Light: Improper Neutralization of Input During Web Page Generation
CVE-2025-24771Jul 4, 2025OTWthemes
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes Content Manager Light content-manager-light allows Reflected XSS.This issue affects Content Manager Light: from n/a through <= 3.2.
7.1 High severity
Widgetize Pages Light: Cross-Site Request Forgery
CVE-2025-30995Jun 6, 2025OTWthemes
Cross-Site Request Forgery (CSRF) vulnerability in OTWthemes Widgetize Pages Light widgetize-pages-light allows Stored XSS.This issue affects Widgetize Pages Light: from n/a through <= 3.0.
7.1 High severity
Popping Content Light: Improper Neutralization of Input During Web Page Generation
CVE-2025-32115Apr 10, 2025OTWthemes
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes Popping Content Light popping-content-light allows Reflected XSS.This issue affects Popping Content Light: from n/a through <= 2.4.
7.1 High severity
Widgetize Pages Light: Improper Neutralization of Input During Web Page Generation
CVE-2025-32117Apr 8, 2025OTWthemes
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes Widgetize Pages Light widgetize-pages-light allows Reflected XSS.This issue affects Widgetize Pages Light: from n/a through <= 3.0.
7.1 High severity
Sidebar Manager Light: Cross-Site Request Forgery
CVE-2025-32112Apr 4, 2025OTWthemes
Cross-Site Request Forgery (CSRF) vulnerability in OTWthemes Sidebar Manager Light sidebar-manager-light allows Cross Site Request Forgery.This issue affects Sidebar Manager Light: from n/a through <= 1.18.
7.1 High severity
Widgetize Pages Light: Improper Neutralization of Input During Web Page Generation
CVE-2025-22313Jan 9, 2025OTWthemes
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes Widgetize Pages Light widgetize-pages-light allows Reflected XSS.This issue affects Widgetize Pages Light: from n/a through <= 3.0.