CVE-2026-112845: WordPress Off-Canvas Sidebars & Menus (Slidebars) plugin <= 0.5.9 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus (Slidebars) off-canvas-sidebars allows Stored XSS.This issue affects Off-Canvas Sidebars & Menus (Slidebars): from n/a through 0.5.9.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Jory Hogeveen Off-Canvas Sidebars & Menus (Slidebars)to a version that resolves this vulnerability.Fixed in 0.5.9.1
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The vulnerability requires low-level privileges. Exploitation also requires user interaction.
What impact can successful exploitation have?
Successful exploitation can result in cross-site scripting in the context of affected pages. The available severity data indicates potential low impact to confidentiality, integrity, and availability, with scope changed.
Which plugin versions are affected?
Off-Canvas Sidebars & Menus (Slidebars) versions through 0.5.9 are affected. No fixed version is provided in the available data.