Log in Start free

OTWthemes

Products

ProductCVEsExploitedLatest
Widgetize Pages Light4–Sep 5, 2025
Sidebar Manager Light3–Sep 10, 2026
Popping Sidebars and Widgets Light2–Dec 30, 2025
Post Custom Templates Lite2–Jun 6, 2025
Content Manager Light2–Jul 4, 2025
Blog Manager Light1–Oct 12, 2023
Popping Content Light1–Apr 10, 2025
Toggles Shortcode and Widget1–Jan 7, 2025
Widget Manager Light1–Apr 3, 2025
Info Boxes Shortcode and Widget1–Mar 24, 2025

Exploited and recent CVEs

  • CVE-2026-76562 High 7.2 Sidebar Manager Light <= 1.18 - Unauthenticated Stored Cross-Site Scripting via 'sbm_description' Parameter 0.4%
  • CVE-2025-69007 Medium 5.9 WordPress Popping Sidebars and Widgets Light plugin <= 1.27 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-58853 High 7.1 WordPress Popping Sidebars and Widgets Light Plugin <= 1.27 - Cross Site Request Forgery (CSRF) Vulnerability 0.1%
  • CVE-2025-58805 Medium 5.9 WordPress Widgetize Pages Light Plugin <= 3.0 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-24771 High 7.1 WordPress Content Manager Light plugin <= 3.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-30942 Medium 5.9 WordPress Post Custom Templates Lite plugin <= 1.14 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-30995 High 7.1 WordPress Widgetize Pages Light plugin <= 3.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability 0.1%
  • CVE-2025-47647 Medium 4.3 WordPress Sidebar Manager Light plugin <= 1.18 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
  • CVE-2025-32115 High 7.1 WordPress Popping Content Light plugin <= 2.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-32117 High 7.1 WordPress Widgetize Pages Light plugin <= 3.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-32112 High 7.1 WordPress Sidebar Manager Light plugin <= 1.18 - CSRF to Stored XSS vulnerability 0.2%
  • CVE-2025-31768 Medium 6.5 WordPress Widget Manager Light plugin <= 1.18 - Broken Access Control vulnerability 0.4%
  • CVE-2025-31770 Medium 6.5 WordPress Content Manager Light plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2025-31767 Medium 6.5 WordPress Post Custom Templates Lite plugin <= 1.14 - Stored Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2025-30541 Medium 4.3 WordPress Info Boxes Shortcode And Widgets plugin <= 1.15 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2025-22313 High 7.1 WordPress Widgetize Pages Light plugin <= 3.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-12207 Medium 4.4 Toggles Shortcode and Widget <= 1.14 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.3%
  • CVE-2023-45102 Medium 5.4 WordPress Blog Manager Light Plugin <= 1.20 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%