WordPress Plugin Vulnerabilities

Custom Sidebars < 3.1.0 - CSRF

Description

The Custom Sidebars – Dynamic Widget Area Manager WordPress plugin was affected by a CSRF security vulnerability.

Affects Plugins

Plugin icon
custom-sidebars
Fixed in 3.1.0

References

CVE
CVE-2017-18510

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
8.8 (high)

Miscellaneous

Verified
No
WPVDB ID
fc977cfb-c613-4ed6-8126-cb07b63adb13

Timeline

Publicly Published
2017-11-07 (about 8 years ago)
Added
2019-08-24 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2025-04-09
Title
Smart Product Gallery Slider <= 1.0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2025-04-01
Title
Cache control by Cacholong <= 5.4.1 - Cross-Site Request Forgery
Published
2023-04-05
Title
YourChannel < 1.2.5 - Multiple CSRF
Published
2025-10-02
Title
Attractive Donations System - Easy Stripe & Paypal donations <= 1.25 - Cross-Site Request Forgery
Published
2025-12-30
Title
WP-CalDav2ICS <= 1.3.4 - Cross-Site Request Forgery