CVE-2025-58853: Otwthemes Popping Sidebars And Widgets Light

High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in OTWthemes Popping Sidebars and Widgets Light popping-sidebars-and-widgets-light allows Reflected XSS.This issue affects Popping Sidebars and Widgets Light: from n/a through <= 1.27.

Affected products

• Otwthemes Popping Sidebars And Widgets Light: up to and including 1.27

Published 2025-09-05. Last modified 2026-06-17.