Custom Sidebars by ProteusThemes
Custom Sidebars by ProteusThemes has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Custom Sidebars by ProteusThemes has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Nabil Irawan. Custom Sidebars by ProteusThemes is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.0.14.
CVE-2025-62733Custom Sidebars by ProteusThemes <= 1.0.3 - Cross-Site Request Forgery
Read the full analysisVulnerability Records

Custom Sidebars by ProteusThemes
Author
ProteusThemes
Replace the theme default sidebars with your newly created sidebars. This plugin was forked from the Custom Sidebars plugin, which we used for a few years, but their plugin development stalled, so we were forced to create this plugin. We really appreciate the work of developers of the original plugin! This plugin allows you to create your own custom sidebars, configure them by adding widgets, and replace the default sidebars on posts or pages you want in just few clicks. Here is the tl;dr list of the differences from original source: Compatibility with the latest stable PHP version (namely PHP 7.0+). Removed the “archive pages” functionality – replacing the custom sidebars on archive pages is not possible (e.g. on certain categories). Open-sourced development on GitHub. Issue reports and pull requests welcome! Covered with PHP unit tests. Fixed couple of JavaScript errors. Removed WP admin pointer. Modern workflow with Grunt and Bower. Removed heavy advertising. Contact and Credits This plugin is being developed by ProtuesThemes. The original plugin: Custom sidebars is maintained and developed by WPMU DEV. Original development completed by Javier Marquez.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C