Vulnerabilities

TI-2024-10626 CVE-2024-11465 · GHSA-2gxw-g2pj-px2q

Custom Product Tabs for WooCommerce <= 1.8.5 - Authenticated (Shop Manager+) PHP Object Injection

LOW 36

The Custom Product Tabs for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.8.5 via deserialization of untrusted input in the 'yikes_woo_products_tabs' post…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01002 Published 2025-01-07 No fix listed CWE-502

TI-2022-21255 CVE-2022-43463 · GHSA-x42c-c4qv-55qm

WordPress Custom Product Tabs for WooCommerce plugin <= 1.7.9 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

LOW 22

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Custom Product Tabs for WooCommerce plugin <= 1.7.9 on WordPress.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00433 Published 2022-11-18 No fix listed CWE-79

TI-2022-11310 CVE-2022-28666 · GHSA-g33g-qhjr-v6fq

WordPress Custom Product Tabs for WooCommerce plugin <= 1.7.7 - Broken Access Control vulnerability

LOW 33

Broken Access Control vulnerability in YIKES Inc.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01454 Published 2022-07-21 No fix listed CWE-287

Vulnerabilities

Filters

Custom Product Tabs for WooCommerce <= 1.8.5 - Authenticated (Shop Manager+) PHP Object Injection

WordPress Custom Product Tabs for WooCommerce plugin <= 1.7.9 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

WordPress Custom Product Tabs for WooCommerce plugin <= 1.7.7 - Broken Access Control vulnerability