Vendors / YIKES, Inc. Records 11 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now YIKES, Inc. records in CISA KEV No YIKES, Inc. vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Records 3 records in Custom Product Tabs For Woocommerce · all components
Priority LOW 36
The Custom Product Tabs for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.8.5 via deserialization of untrusted input in the 'yikes_woo_products_tabs' post…
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01002 · Published 2025-01-07 · No fix listed CWE-502
Priority LOW 33
Broken Access Control vulnerability in YIKES Inc.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01454 · Published 2022-07-21 · No fix listed CWE-287
Priority LOW 22
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Custom Product Tabs for WooCommerce plugin <= 1.7.9 on WordPress.
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00433 · Published 2022-11-18 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 1 9 0 0
