Custom Sidebars by ProteusThemes

Custom Sidebars by ProteusThemes has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for Custom Sidebars by ProteusThemes has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Nabil Irawan. Custom Sidebars by ProteusThemes is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.0.14.

Strategic Overview

Avg CVSSMedium
4.3/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Custom Sidebars by ProteusThemes vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2025-62733

Custom Sidebars by ProteusThemes <= 1.0.3 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

1 records
Custom Sidebars by ProteusThemes banner
Latestv1.0.3

Custom Sidebars by ProteusThemes

ProteusThemes

Author

ProteusThemes

0.0(0)
0/100
Last Updated
2022-09-19 (4y ago)
Active Installs
1,000+
Downloads
22,228
Requires WP
5.2+
Requires PHP
0+
Tested up to
WP 6.0.14
Created
2016-07-22 (10y ago)

Replace the theme default sidebars with your newly created sidebars. This plugin was forked from the Custom Sidebars plugin, which we used for a few years, but their plugin development stalled, so we were forced to create this plugin. We really appreciate the work of developers of the original plugin! This plugin allows you to create your own custom sidebars, configure them by adding widgets, and replace the default sidebars on posts or pages you want in just few clicks. Here is the tl;dr list of the differences from original source: Compatibility with the latest stable PHP version (namely PHP 7.0+). Removed the “archive pages” functionality – replacing the custom sidebars on archive pages is not possible (e.g. on certain categories). Open-sourced development on GitHub. Issue reports and pull requests welcome! Covered with PHP unit tests. Fixed couple of JavaScript errors. Removed WP admin pointer. Modern workflow with Grunt and Bower. Removed heavy advertising. Contact and Credits This plugin is being developed by ProtuesThemes. The original plugin: Custom sidebars is maintained and developed by WPMU DEV. Original development completed by Javier Marquez.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C