Unknown Tabs vulnerabilities

• unknown tabs responsive Tabs Responsive <= 2.5 - Shop Manager+ Stored XSS via WooCommerce Product Tab Content CVE-2026-13718 6.8 MediumOctober 2, 2026
• shapedplugin wp tabs WP Tabs < 2.2.7 - Admin+ Stored XSS CVE-2024-11503 6.1 MediumMarch 25, 2025
• tabs shortcode project shortcode, unknown tabs shortcode +1 more Tabs Shortcode <= 2.0.2 - Contributor+ XSS via Shortcode CVE-2024-11606 5.3 MediumJanuary 7, 2025
• unknown responsive tabs Responsive Tabs <= 4.0.8 - Contributor+ Stored XSS CVE-2024-4096 5.9 MediumJuly 30, 2024
• unknown responsive tabs WordPress Responsive Tabs plugin < 4.0.6 - HTML Content Injection vulnerability CVE-2023-45635 5.4 MediumJune 4, 2024
• unknown responsive tabs Responsive Tabs < 4.0.7 - Contributor+ Stored XSS CVE-2024-1846 5.4 MediumApril 15, 2024
• otwthemes tabs shortcode and widget Tabs Shortcode and Widget <= 1.17 - Contributor+ Stored Cross-Site Scripting CVE-2024-0719 5.4 MediumMarch 18, 2024
• premio my sticky elements, unknown all-in-one floating contact form, call, chat, and 50+ social icon tabs +1 more All-in-one Floating Contact Form < 2.1.2 - Admin+ Stored Cross-Site Scripting CVE-2023-3248 4.8 MediumJuly 24, 2023
• responsive tabs for wpbakery page builder project tabs for wpbakery page builder, unknown responsive tabs for wpbakery page builder (formerly visual composer) +1 more Responsive Tabs For WPBakery Page Builder <= 1.1 - Contributor+ Stored XSS CVE-2023-0368 5.4 MediumJune 19, 2023
• premio my sticky elements, unknown all-in-one floating contact form, call, chat, and 50+ social icon tabs +1 more My Sticky Elements < 2.0.9 - Admin+ SQLi CVE-2023-0487 7.2 HighFebruary 27, 2023
• shapedplugin wp tabs WP Tabs < 2.1.17 - Contributor+ Stored XSS CVE-2023-0071 5.4 MediumJanuary 30, 2023
• posttabs project posttabs postTabs <= 2.10.6 - Arbitrary Settings Update via CSRF to Stored XSS CVE-2022-1781 5.4 MediumJune 13, 2022
• billy bryant tabs, wpshopmart tabs responsive +1 more Tabs Responsive < 2.2.8 - Editor+ Stored Cross-Site Scripting CVE-2022-1298 4.8 MediumMay 23, 2022
• dtabs project dtabs dTabs <= 1.4 - Reflected Cross-Site Scripting CVE-2022-0621 6.1 MediumMarch 28, 2022
• premio mystickyelements, unknown all-in-one floating contact form, call, chat, and 50+ social icon tabs – my sticky elements +1 more All-in-one Floating Contact Form < 2.0.4 - Authenticated Reflected Cross-Site Scripting (XSS) CVE-2022-0148 5.4 MediumFebruary 7, 2022