6.5 Medium

CVE-2025-31768 Missing Authorization vulnerability in OTWthemes Widget Manager Light widget-manager-light allows Accessing…

Description

Missing Authorization vulnerability in OTWthemes Widget Manager Light widget-manager-light allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Widget Manager Light: from n/a through <= 1.18.

Affected products and versions

Product	Affected versions	Fixed in
Widget Manager Light 1.18	earliest → 1.18	No fix stated

Do you use Widget Manager Light?

Track this CVE Watch Widget Manager Light Check my SBOMs

www.cveye.io/en/cve/CVE-2025-31768

Timeline

Published April 3, 2025
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE