Custom Sidebars – Dynamic Sidebar Classic Widget Area Manager

Custom Sidebars – Dynamic Sidebar Classic Widget Area Manager has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2015 and 2017; all 3 are fixed as of September 2026. Their average CVSS score is 7.9, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2017 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (67%). Other recurring categories include Cross-Site Scripting.

Every one of the 3 issues recorded for Custom Sidebars – Dynamic Sidebar Classic Widget Area Manager has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by Kacper Szurek. Custom Sidebars – Dynamic Sidebar Classic Widget Area Manager is installed on roughly 100,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSHigh
7.9/ 10
Patch Coverage100%
Open

0

Fixed

3

Get automatic notifications for all Custom Sidebars – Dynamic Sidebar Classic Widget Area Manager vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2017-18510

Custom Sidebars <= 3.0.9 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

3 records
Custom Sidebars – Dynamic Sidebar Classic Widget Area Manager banner
Latestv3.38

Custom Sidebars – Dynamic Sidebar Classic Widget Area Manager

WebFactory

Author

WebFactory

4.7(1,028)
94/100
Last Updated
2026-08-16 (28d ago)
Active Installs
100,000+
Downloads
5,223,913
Requires WP
4.6+
Requires PHP
5.6+
Tested up to
WP 7.1
Created
2010-08-23 (16y ago)

Manage and replace sidebars and other classic widget areas on your site with Custom Sidebars, a flexible widget area manager. Make custom sidebar configurations and be able to choose what classic widgets display on each page or post of your site. Need to make a widget sticky or fixed? Try our free WP Sticky Anything plugin. Custom Sidebars works ONLY with the classic widgets screen that was used in WordPress before version 5.8. If you want to use it with version 5.8 (and above) you have to install the official Classic Widgets plugin, or enable the classic widgets interface yourself. Once the classic widgets screen is activated the plugin will work the same as before. Having problems setting up SSL or generating an SSL certificate? Install the free WP Force SSL plugin. Display Different Sidebars on Pages and Posts Custom Sidebars allows you to dynamically display custom widget configurations on any page, post, category, post type, or archive page. ★★★★★ “Custom Sidebars will go on my “essential plugins” list from now on. I am pleased by how easy it was to figure out and by how many options are available in the free version.” – monkeyhateclean ★★★★★ “This plugin does exactly what it says. It’s light, integrates well into WordPress and gives you tons of possibilities.” – DarkNova Every part of Custom Sidebars integrates seamlessly with the Widgets menu for simplicity and control. No confusing settings pages or added menu items, just simple core integration. A Simple Flexible Sidebar Manager ** Custom Sidebars Includes: ** * Unlimited custom widget configurations * Set custom widgets for individual posts and pages, categories, post types, and archives * Seamless integration with the WordPress Widgets menu * Works with well-coded themes and doesn’t slow down your site * Set individual widget visibility – for guests, by user role, by post type, for special pages or categories * Author specific sidebars – display a custom sidebar for each of your authors * Clone and sync widget settings – quickly edit complex configurations * Import and export custom sidebars – backup and share sidebars Install Custom Sidebars and see for yourself why it’s the most popular widget extension plugin available for WordPress with over 200,000 active installs. Contact and Credits Original development completed by Javier Marquez.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C