# OTWthemes Popping Sidebars and Widgets Light.

Every CVE that names OTWthemes Popping Sidebars and Widgets Light among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [WordPress Popping Sidebars and Widgets Light plugin <= 1.27 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2025-69007.md)
  `CVE-2025-69007` · CVE record: OTWthemes Popping Sidebars and Widgets Light · CVSS 5.9 Medium · Not analysed yet · Published 30 Dec 2025 · Tags: Cross-site scripting (XSS)
- [WordPress Popping Sidebars and Widgets Light Plugin <= 1.27 - Cross Site Request Forgery (CSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58853.md)
  `CVE-2025-58853` · CVE record: OTWthemes Popping Sidebars and Widgets Light · CVSS 7.1 High · Not analysed yet · Published 5 Sept 2025 · Tags: Cross-site request forgery (CSRF)

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=otwthemes-popping-sidebars-and-widgets-light>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/otwthemes-popping-sidebars-and-widgets-light/>. Everything for agents: <https://agentprime.io/llms.txt>.