Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Web Builder 143 Component: Custom Product Tabs For Woocommerce Clear all filters
TI-2024-11794 CVE-2024-12721 · GHSA-5639-7qch-2gcr

Custom Product Tabs For WooCommerce <= 1.2.4 - Authenticated (Shop Manager+) PHP Object Injection

Priority LOW 35

The Custom Product Tabs For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.2.4 via deserialization of untrusted input from the 'wb_custom_tabs' parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00698 Published 2024-12-21 No fix listed CWE-502