CVE-2025-30860: WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin <= 0.5.8.2 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus (Slidebars) off-canvas-sidebars allows DOM-Based XSS.This issue affects Off-Canvas Sidebars & Menus (Slidebars): from n/a through <= 0.5.8.2.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-30860?
CVE-2025-30860 is classified as a Cross-site Scripting (XSS) vulnerability which can lead to significant security risks if exploited.
How do I fix CVE-2025-30860?
To fix CVE-2025-30860, update the Off-Canvas Sidebars & Menus (Slidebars) plugin to the latest version that addresses the vulnerability.
What applications are affected by CVE-2025-30860?
CVE-2025-30860 affects versions of Off-Canvas Sidebars & Menus (Slidebars) up to and including 0.5.8.2.
What type of attack is associated with CVE-2025-30860?
CVE-2025-30860 is associated with DOM-based Cross-site Scripting (XSS) attacks, allowing attackers to inject malicious scripts.
Can I be vulnerable if I am using a version higher than 0.5.8.2 for CVE-2025-30860?
If you are using a version higher than 0.5.8.2 of Off-Canvas Sidebars & Menus (Slidebars), you are not vulnerable to CVE-2025-30860.