CVE-2025-49290: WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin <= 0.5.8.4 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus (Slidebars) allows Reflected XSS. This issue affects Off-Canvas Sidebars & Menus (Slidebars): from n/a through 0.5.8.4.
Other sources
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus (Slidebars) off-canvas-sidebars allows Reflected XSS.This issue affects Off-Canvas Sidebars & Menus (Slidebars): from n/a through <= 0.5.8.4.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-49290?
CVE-2025-49290 is classified as a Reflected Cross-site Scripting (XSS) vulnerability affecting specific versions of Off-Canvas Sidebars & Menus (Slidebars).
How do I fix CVE-2025-49290?
To fix CVE-2025-49290, update the Off-Canvas Sidebars & Menus (Slidebars) plugin to version 0.5.8.5 or later.
Who is affected by CVE-2025-49290?
CVE-2025-49290 affects users of the Off-Canvas Sidebars & Menus (Slidebars) plugin from any version up to and including 0.5.8.4.
What type of vulnerability is CVE-2025-49290?
CVE-2025-49290 is categorized as an improper neutralization of input during web page generation, leading to a reflected XSS vulnerability.
Can CVE-2025-49290 be exploited remotely?
Yes, CVE-2025-49290 can be exploited remotely by attackers using crafted URLs to execute unauthorized scripts in a user's browser.