7.1 High

CVE-2025-58853 Cross-Site Request Forgery (CSRF) vulnerability in OTWthemes Popping Sidebars and Widgets Light…

Description

Cross-Site Request Forgery (CSRF) vulnerability in OTWthemes Popping Sidebars and Widgets Light popping-sidebars-and-widgets-light allows Reflected XSS.This issue affects Popping Sidebars and Widgets Light: from n/a through <= 1.27.

Affected products and versions

Product	Affected versions	Fixed in
Popping Sidebars and Widgets Light 1.27	earliest → 1.27	No fix stated

The 2 CVEs of Popping Sidebars and Widgets Light →

CVE-2025-69007 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes… 5.9 Medium

Do you use Popping Sidebars and Widgets Light?

Track this CVE Watch Popping Sidebars and Widgets Light Check my SBOMs

www.cveye.io/en/cve/CVE-2025-58853

Timeline

Published September 5, 2025
Last modified May 12, 2026

References

patchstack.com patchstack.com

Track this CVE

CVE-2025-58853 Cross-Site Request Forgery (CSRF) vulnerability in OTWthemes Popping Sidebars and Widgets Light…

Description

Affected products and versions

Other CVEs of Popping Sidebars and Widgets Light