Unknown WP Tabs vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown WP Tabs, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1MediumCVE-2024-11503shapedplugin · wp_tabs +2 moreWP Tabs < 2.2.7 - Admin+ Stored XSSThe WP Tabs WordPress plugin before 2.2.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).EPSS0.28%6.4MediumCVE-2023-0071shapedplugin · wp_tabs +2 moreWP Tabs < 2.1.17 - Contributor+ Stored XSSThe WP Tabs WordPress plugin before 2.1.17 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.EPSS0.53%