Lucene search
K

11 matches found

CNVD
CNVD
added 2025/11/20 12:0 a.m.2 views

WordPress Category and Product Woocommerce Tabs plugin file inclusion vulnerability

WordPress Category and Product Woocommerce Tabs plugin is a plugin for WordPress websites, the main function is to add custom tabs Tabs to WooCommerce product pages to organize and display product information, categories and other content. A file inclusion vulnerability exists in the WordPress...

8.8CVSS7.3AI score0.00054EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/11/19 9:9 a.m.2 views

CVE-2025-13088

The Category and Product Woocommerce Tabs plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.0. This is due to insufficient input validation on the 'template' parameter in the categoryProductTab function. This makes it possible for authenticated...

8.8CVSS6.4AI score0.00054EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/18 9:30 a.m.2 views

EUVD-2025-197936

The Category and Product Woocommerce Tabs plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.0. This is due to insufficient input validation on the 'template' parameter in the categoryProductTab function. This makes it possible for authenticated...

8.8CVSS5.9AI score0.00054EPSS
Exploits0References3
NVD
NVD
added 2025/11/18 9:15 a.m.4 views

CVE-2025-13088

The Category and Product Woocommerce Tabs plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.0. This is due to insufficient input validation on the 'template' parameter in the categoryProductTab function. This makes it possible for authenticated...

8.8CVSS0.00054EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/11/18 8:27 a.m.3 views

CVE-2025-13088 Category and Product Woocommerce Tabs <= 1.0 - Authenticated (Contributor+) Local File Inclusion

The Category and Product Woocommerce Tabs plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.0. This is due to insufficient input validation on the 'template' parameter in the categoryProductTab function. This makes it possible for authenticated...

8.8CVSS0.00054EPSS
Exploits0References2
CVE
CVE
added 2025/11/18 8:27 a.m.11 views

CVE-2025-13088

The CVE-2025-13088 relates to the WordPress plugin Category and Product Woocommerce Tabs. Multiple connected sources confirm a Local File Inclusion in the categoryProductTab() function caused by insufficient validation of the template parameter, affecting all versions up to 1.0. The vulnerability...

8.8CVSS6AI score0.00054EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/11/18 12:0 a.m.2 views

WordPress plugin Category and Product Woocommerce Tabs 安全漏洞

WordPress Category and Product Woocommerce Tabs plugin is a plugin for WordPress websites, the main function is to add custom tabs Tabs to WooCommerce product pages to organize and display product information, categories and other content. A file inclusion vulnerability exists in the WordPress...

8.8CVSS7AI score0.00054EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/11/18 12:0 a.m.2 views

PT-2025-47266

Name of the Vulnerable Software and Affected Versions Woocommerce Tabs plugin for WordPress versions prior to 1.1 Description The Category and Product Woocommerce Tabs plugin for WordPress is susceptible to Local File Inclusion due to inadequate input validation on the template parameter within t...

8.8CVSS6.7AI score0.00054EPSS
Exploits0References8
Patchstack
Patchstack
added 2025/11/17 11:14 p.m.3 views

WordPress Category and Product Woocommerce Tabs plugin <= 1.0 - Authenticated (Contributor+) Local File Inclusion vulnerability

Authenticated Contributor+ Local File Inclusion vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Category and Product Woocommerce Tabs versions = 1.0...

8.8CVSS7.1AI score0.00054EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2025/09/09 5:8 p.m.3 views

WordPress Additional Custom Product Tabs for WooCommerce Plugin <= 1.7.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Additional Custom Product Tabs for WooCommerce versions = 1.7.3...

6.5CVSS6AI score0.00047EPSS
Exploits0Affected Software1
OSV
OSV
added 2022/11/18 7:15 p.m.2 views

CVE-2022-43463

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Custom Product Tabs for WooCommerce plugin = 1.7.9 on WordPress...

4.8CVSS5.8AI score0.00218EPSS
Exploits0References1
Rows per page
Query Builder