Approved changes feed: RSS · Atom

cpe:2.3:a:otwthemes:popping_sidebars_and_widgets_light:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOtwthemes (6f083afe-ad9c-58fc-a5cc-ad8ad7d44025)
ProductPopping Sidebars And Widgets Light (c30a08a0-1bc3-5f0a-ad5d-fbadb1eab4e9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-69007 vulnerable 2026-06-08 07:41:22.035230 WordPress Popping Sidebars and Widgets Light plugin <= 1.27 - Cross Site Scripting (XSS) vulnerability
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes Popping Sidebars and Widgets Light popping-sidebars-and-widgets-light allows Stored XSS.This issue affects Popping Sidebars and Widgets Light: from n/a through <= 1.27.
Published: 2025-12-30T10:47:52.485Z
Updated: 2026-04-28T20:32:11.261Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58853 vulnerable 2026-06-08 07:35:19.629501 WordPress Popping Sidebars and Widgets Light Plugin <= 1.27 - Cross Site Request Forgery (CSRF) Vulnerability
HIGH (7.1)
Cross-Site Request Forgery (CSRF) vulnerability in OTWthemes Popping Sidebars and Widgets Light popping-sidebars-and-widgets-light allows Reflected XSS.This issue affects Popping Sidebars and Widgets Light: from n/a through <= 1.27.
Published: 2025-09-05T13:45:36.247Z
Updated: 2026-05-12T00:48:29.763Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.