CVE-2025-62891

Name of the Vulnerable Software and Affected Versions Off-Canvas Sidebars & Menus (Slidebars) versions prior to 0.5.8.6

Description Cross-Site Request Forgery (CSRF) occurs due to missing or incorrect nonce validation on a function. This allows unauthenticated attackers to perform unauthorized actions by tricking a site administrator into clicking a malicious link, which sends a forged request to the application.

Recommendations Update Off-Canvas Sidebars & Menus (Slidebars) to a version newer than 0.5.8.5.