CVE-2025-62891: WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin <= 0.5.8.5 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus (Slidebars) off-canvas-sidebars allows Cross Site Request Forgery.This issue affects Off-Canvas Sidebars & Menus (Slidebars): from n/a through <= 0.5.8.5.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62891?
CVE-2025-62891 is a Cross-Site Request Forgery (CSRF) vulnerability that can potentially allow attackers to perform actions on behalf of authenticated users.
How do I fix CVE-2025-62891?
To fix CVE-2025-62891, update the Off-Canvas Sidebars & Menus (Slidebars) plugin to version 0.5.8.6 or later.
Who is affected by CVE-2025-62891?
CVE-2025-62891 affects users of the Off-Canvas Sidebars & Menus (Slidebars) plugin version 0.5.8.5 and earlier.
What systems are vulnerable to CVE-2025-62891?
CVE-2025-62891 impacts both Jory Hogeveen and WordPress implementations of the Off-Canvas Sidebars & Menus plugin.
What kind of attacks can be performed using CVE-2025-62891?
CVE-2025-62891 allows attackers to perform unauthorized actions on behalf of a user in the context of a web application.