The OTWthemes Sidebar Manager Light plugin, versions up to 1.18, contains a CSRF vulnerability (CVE-2025-47647) that enables an attacker to induce an authenticated user to execute unwanted actions by submitting forged requests. The vulnerability does not affect confidentiality or availability but impacts integrity with limited scope. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact.

Successful exploitation could allow an attacker to cause a logged-in user to perform unintended actions within the Sidebar Manager Light plugin, potentially leading to limited integrity impact. There is no impact on confidentiality or availability according to the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as verifying anti-CSRF tokens on sensitive actions or restricting access to trusted users only. Monitor vendor channels for updates and apply patches promptly once released.