Cross-Site Request Forgery Vulnerability in OTWthemes Sidebar Manager Light
CVE-2025-47647

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
Sidebar Manager Light
Vendor
CVE Published:
7 May 2025

What is CVE-2025-47647?

The Sidebar Manager Light by OTWthemes has a Cross-Site Request Forgery (CSRF) vulnerability that could allow an attacker to execute unauthorized actions on behalf of the user. This vulnerability specifically affects versions from n/a through 1.18, making it crucial for users to ensure they are using the latest patches and updates to mitigate potential risks. Implementing proper security measures can help protect against this type of attack.

Affected Version(s)

Sidebar Manager Light 0 <= 1.18

References

https://patchstack.com/database/Wordpress/Plugin/sidebar-...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nguyen Thi Huyen Trang - Skalucy (Patchstack Alliance)
.