PT-2025-43770 · Jory Hogeveen · Off-Canvas Sidebars & Menus

Published 2025-10-27 · Updated 2025-10-27 · CVE-2025-62891

NVD

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus (Slidebars) off-canvas-sidebars allows Cross Site Request Forgery.This issue affects Off-Canvas Sidebars & Menus (Slidebars): from n/a through <= 0.5.8.5.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-62891

Affected Products

Off-Canvas Sidebars & Menus

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-62891 · Security Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/off-canvas-sidebars/vulnerability/wordpress-off-canvas-sidebars-menus-slidebars-plugin-0-5-8-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/off-canvas-sidebars/vulnerability/wordpress-off-canvas-sidebars-menus-slidebars-plugin-0-5-8-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/off-canvas-sidebars/vulnerability/wordpress-off-canvas-sidebars-menus-slidebars-plugin-0-5-8-5-cross-site-request-forgery-csrf-vulnerability · Note