1007 matches found
CVE-2025-48134 WordPress WP Tabs plugin <= 2.2.12 - PHP Object Injection Vulnerability
Deserialization of Untrusted Data vulnerability in ShapedPlugin LLC WP Tabs wp-expand-tabs-free allows Object Injection.This issue affects WP Tabs: from n/a through = 2.2.12...
WordPress plugin WP Tabs 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...
PT-2025-21731 · Shapedplugin Llc · Wp Tabs
Name of the Vulnerable Software and Affected Versions: ShapedPlugin LLC WP Tabs versions 2.2.11 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions 2.2.11 and earlier, update to a version that contains a...
CVE-2025-46522
Cross-Site Request Forgery CSRF vulnerability in Billy Bryant Tabs gt-tabs allows Stored XSS.This issue affects Tabs: from n/a through = 4.0.3...
WordPress Tabs plugin <= 4.0.3 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
Cross Site Request Forgery CSRF to Stored XSS vulnerability discovered by johska in WordPress Plugin Tabs versions = 4.0.3...
CVE-2025-46522
Cross-Site Request Forgery CSRF vulnerability in Billy Bryant Tabs gt-tabs allows Stored XSS.This issue affects Tabs: from n/a through = 4.0.3...
CVE-2025-46522 WordPress Tabs plugin <= 4.0.3 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Billy Bryant Tabs gt-tabs allows Stored XSS.This issue affects Tabs: from n/a through = 4.0.3...
CVE-2025-46522 WordPress Tabs plugin <= 4.0.3 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in Billy Bryant Tabs allows Stored XSS. This issue affects Tabs: from n/a through 4.0.3...
CVE-2025-46522
CVE-2025-46522 : WordPress Tabs plugin (Billy Bryant Tabs) up to version 4.0.3 is affected by a Cross-Site Request Forgery (CSRF) that enables Stored XSS. The issue affects the Tabs component as listed (n/a through 4.0.3). Mitigation/fix: upgrade to a version later than 4.0.3 where the vulnerabil...
PT-2025-17826 · Unknown · Billy Bryant Tabs
Name of the Vulnerable Software and Affected Versions: Billy Bryant Tabs versions n/a through 4.0.3 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations: For versions n/a through 4.0.3, update to a version later than 4.0.3 to resolve th...
WordPress plugin Tabs 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site reque...
MGASA-2025-0137 Updated chromium-browser-stable packages fix security vulnerabilities
Use after free in Site Isolation. CVE-2025-3066 Inappropriate implementation in Custom Tabs. CVE-2025-3067 Inappropriate implementation in Intents. CVE-2025-3068 Inappropriate implementation in Extensions. CVE-2025-3069 Insufficient validation of untrusted input in Extensions. CVE-2025-3070...
Updated chromium-browser-stable packages fix security vulnerabilities
Use after free in Site Isolation. CVE-2025-3066 Inappropriate implementation in Custom Tabs. CVE-2025-3067 Inappropriate implementation in Intents. CVE-2025-3068 Inappropriate implementation in Extensions. CVE-2025-3069 Insufficient validation of untrusted input in Extensions. CVE-2025-3070...
The vulnerability of the Custom Tabs component in Google Chrome and Microsoft Edge browsers allows a hacker to replace the user interface.
The vulnerability of the Custom Tabs component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to replace the user interface with a specially created HTML page...
CVE-2025-26749
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Additional Custom Product Tabs for WooCommerce product-tabs-for-woocommerce allows Stored XSS.This issue affects Additional Custom Product Tabs for WooCommerce: from n/a through = 1.7.0...
CVE-2025-26749
CVE-2025-26749: Stored XSS in WPFactory Additional Custom Product Tabs for WooCommerce (Authenticated) affects the WordPress plugin Additional Custom Product Tabs for WooCommerce, versions up to 1.7.0. Root cause is improper neutralization of input during web page generation, enabling stored cros...
CVE-2025-32075
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Tabs Extension allows Code Injection.This issue affects Mediawiki - Tabs Extension: from 1.39 through 1.43...
CVE-2025-32075
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Tabs Extension allows Code Injection.This issue affects Mediawiki - Tabs Extension: from 1.39 through 1.43...
CVE-2025-32075
CVE-2025-32075 concerns the Wikimedia Foundation MediaWiki – Tabs Extension. Affected: versions 1.39–1.43. Issue: Improper input validation enabling Code Injection. Impact metrics indicate low to moderate confidentiality/integrity/availability effects with CVSS v4.0 base score 6.9 (NETWORK attack...
CVE-2025-32075 IP and user agent leaks in Extension:Tabs
Improper Input Validation vulnerability in The Wikimedia Foundation Mediawiki - Tabs Extension allows Code Injection.This issue affects Mediawiki - Tabs Extension: from 1.39 through 1.43...