Skip to content
OpenAdvisories

Vendor

otwthemes

18 known vulnerabilities.

Products

Widgetize Pages Light 4 Sidebar Manager Light 3 Content Manager Light 2 Popping Sidebars and Widgets Light 2 Post Custom Templates Lite 2 Blog Manager Light 1 Toggles Shortcode and Widget 1 Widget Manager Light 1 Popping Content Light 1 Info Boxes Shortcode and Widget 1
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 5.9
    CVE-2025-69007

    WordPress Popping Sidebars and Widgets Light plugin <= 1.27 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes Popping Sidebars and Widgets Light popping-sidebars-and-widgets-light allows Stored XSS.This issue affects Popping Sidebars and Widgets Light: from…

    otwthemes Popping Sidebars and Widgets Light
  • Medium 5.9
    CVE-2025-58805

    WordPress Widgetize Pages Light Plugin <= 3.0 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes Widgetize Pages Light widgetize-pages-light allows Stored XSS.This issue affects Widgetize Pages Light: from n/a through <= 3.0.

    otwthemes Widgetize Pages Light
  • Medium 5.9
    CVE-2025-30942

    WordPress Post Custom Templates Lite plugin <= 1.14 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes Post Custom Templates Lite post-custom-templates-lite allows Stored XSS.This issue affects Post Custom Templates Lite: from n/a through <= 1.14.

    otwthemes Post Custom Templates Lite
  • Medium 4.3
    CVE-2025-47647

    WordPress Sidebar Manager Light plugin <= 1.18 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in OTWthemes Sidebar Manager Light sidebar-manager-light allows Cross Site Request Forgery.This issue affects Sidebar Manager Light: from n/a through <= 1.18.

    otwthemes Sidebar Manager Light
  • Medium 6.5
    CVE-2025-31768

    WordPress Widget Manager Light plugin <= 1.18 - Broken Access Control vulnerability

    Missing Authorization vulnerability in OTWthemes Widget Manager Light widget-manager-light allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Widget Manager Light: from n/a through <= 1.18.

    otwthemes Widget Manager Light
  • Medium 6.5
    CVE-2025-31770

    WordPress Content Manager Light plugin <= 3.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes Content Manager Light content-manager-light allows Stored XSS.This issue affects Content Manager Light: from n/a through <= 3.2.

    otwthemes Content Manager Light
  • Medium 6.5
    CVE-2025-31767

    WordPress Post Custom Templates Lite plugin <= 1.14 - Stored Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes Post Custom Templates Lite post-custom-templates-lite allows Stored XSS.This issue affects Post Custom Templates Lite: from n/a through <= 1.14.

    otwthemes Post Custom Templates Lite
  • Medium 4.3
    CVE-2025-30541

    WordPress Info Boxes Shortcode And Widgets plugin <= 1.15 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in OTWthemes Info Boxes Shortcode and Widget info-boxes-shortcode-and-widget allows Cross Site Request Forgery.This issue affects Info Boxes Shortcode and Widget: from n/a through <= 1.15.

    otwthemes Info Boxes Shortcode and Widget
  • Medium 4.4
    CVE-2024-12207

    Toggles Shortcode and Widget <= 1.14 - Authenticated (Administrator+) Stored Cross-Site Scripting

    The Toggles Shortcode and Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘content’ parameter in all versions up to, and including, 1.14 due to insufficient input sanitization and output escaping. This makes it possible for au…

    otwthemes Toggles Shortcode and Widget Web / CMS
  • Medium 5.4
    CVE-2023-45102

    WordPress Blog Manager Light Plugin <= 1.20 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in OTWthemes Blog Manager Light plugin <= 1.20 versions.

    otwthemes Blog Manager Light