Widget Manager Light

Widget Manager Light has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Widget Manager Light has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Skalucy. Widget Manager Light is installed on roughly 600 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.9.16.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Widget Manager Light vulnerabilities before they are exploited.

Most severe open issueCVSS 5.3CVE-2025-31768

Widget Manager Light <= 1.18 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Widget Manager Light banner
Latestv1.18

Widget Manager Light

OTWthemes

Author

OTWthemes

3.8(11)
76/100
Last Updated
2022-03-03 (5y ago)
Active Installs
600+
Downloads
49,605
Requires WP
3.0+
Requires PHP
0+
Tested up to
WP 5.9.16
Created
2012-08-27 (14y ago)

Widget Manager gives you full control over widget visibility via nice and easy interface. Every widget can now be displayed on or hidden from one or few pages. Display relevent content on your pages, posts, categories, tags, archives, custom post types, custom taxonomies, page templates, WordPress service pages, etc.. Upgrade to the Pro version of this plugin – the worlds most complete Sidebar and Widget management system for WordPress including regular updates and premium support: Sidebar and Widget Manager | Demo site Display widgets based on language(WMPL plugin) or user role is available as well. Support for WooCommerce plugin, bbPress plugin and BuddyPress plugin has been added too. This plugin works with all widgedets – WordPress default and any custom added widget. The interface is very intuitive and requires no coding knowledge at all. How Widget Manager Light works Go to Appearance -> Widgets. Select a Widget in any sidebar. Click on the Set Visibility button. Select where to display on or hide from.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C