Widget Manager Light
Widget Manager Light has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Widget Manager Light has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Skalucy. Widget Manager Light is installed on roughly 600 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.9.16.
CVE-2025-31768Widget Manager Light <= 1.18 - Missing Authorization
Read the full analysisVulnerability Records

Widget Manager Light
Author
OTWthemes
Widget Manager gives you full control over widget visibility via nice and easy interface. Every widget can now be displayed on or hidden from one or few pages. Display relevent content on your pages, posts, categories, tags, archives, custom post types, custom taxonomies, page templates, WordPress service pages, etc.. Upgrade to the Pro version of this plugin – the worlds most complete Sidebar and Widget management system for WordPress including regular updates and premium support: Sidebar and Widget Manager | Demo site Display widgets based on language(WMPL plugin) or user role is available as well. Support for WooCommerce plugin, bbPress plugin and BuddyPress plugin has been added too. This plugin works with all widgedets – WordPress default and any custom added widget. The interface is very intuitive and requires no coding knowledge at all. How Widget Manager Light works Go to Appearance -> Widgets. Select a Widget in any sidebar. Click on the Set Visibility button. Select where to display on or hide from.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C