Advisories · Technology

OTWthemes Popping Sidebars and Widgets Light.

Every CVE that names OTWthemes Popping Sidebars and Widgets Light among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-69007 CVE record

CVSS 5.9 Medium

WordPress Popping Sidebars and Widgets Light plugin <= 1.27 - Cross Site Scripting (XSS) vulnerability
- OTWthemes Popping Sidebars and Widgets Light
- Cross-site scripting (XSS)
Not analysed yet 30 Dec 2025
CVE-2025-58853 CVE record

CVSS 7.1 High

WordPress Popping Sidebars and Widgets Light Plugin <= 1.27 - Cross Site Request Forgery (CSRF) Vulnerability
- OTWthemes Popping Sidebars and Widgets Light
- Cross-site request forgery (CSRF)
Not analysed yet 5 Sept 2025