Lucene search
+L

11 matches found

CNVD
CNVD
•added 2025/11/20 12:00 a.m.•19 views

WordPress Category and Product Woocommerce Tabs plugin file inclusion vulnerability

WordPress Category and Product Woocommerce Tabs plugin is a plugin for WordPress websites, the main function is to add custom tabs Tabs to WooCommerce product pages to organize and display product information, categories and other content. A file inclusion vulnerability exists in the WordPress...

8.8CVSS7.3AI score0.00331EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/19 9:09 a.m.•33 views

CVE-2025-13088

The Category and Product Woocommerce Tabs plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.0. This is due to insufficient input validation on the 'template' parameter in the categoryProductTab function. This makes it possible for authenticated...

8.8CVSS6.4AI score0.00331EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/18 9:30 a.m.•15 views

EUVD-2025-197936

The Category and Product Woocommerce Tabs plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.0. This is due to insufficient input validation on the 'template' parameter in the categoryProductTab function. This makes it possible for authenticated...

8.8CVSS5.9AI score0.00331EPSS
SaveExploits0References3
NVD
NVD
•added 2025/11/18 9:15 a.m.•23 views

CVE-2025-13088

The Category and Product Woocommerce Tabs plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.0. This is due to insufficient input validation on the 'template' parameter in the categoryProductTab function. This makes it possible for authenticated...

8.8CVSS0.00331EPSS
SaveExploits0References2
CVE
CVE
•added 2025/11/18 8:27 a.m.•36 views

CVE-2025-13088

The CVE-2025-13088 relates to the WordPress plugin Category and Product Woocommerce Tabs. Multiple connected sources confirm a Local File Inclusion in the categoryProductTab() function caused by insufficient validation of the template parameter, affecting all versions up to 1.0. The vulnerability...

8.8CVSS6AI score0.00331EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/11/18 8:27 a.m.•21 views

CVE-2025-13088 Category and Product Woocommerce Tabs <= 1.0 - Authenticated (Contributor+) Local File Inclusion

The Category and Product Woocommerce Tabs plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.0. This is due to insufficient input validation on the 'template' parameter in the categoryProductTab function. This makes it possible for authenticated...

8.8CVSS0.00331EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/11/18 12:00 a.m.•12 views

WordPress plugin Category and Product Woocommerce Tabs 安全漏洞

WordPress Category and Product Woocommerce Tabs plugin is a plugin for WordPress websites, the main function is to add custom tabs Tabs to WooCommerce product pages to organize and display product information, categories and other content. A file inclusion vulnerability exists in the WordPress...

8.8CVSS7AI score0.00331EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/11/18 12:00 a.m.•17 views

PT-2025-47266

Name of the Vulnerable Software and Affected Versions Woocommerce Tabs plugin for WordPress versions prior to 1.1 Description The Category and Product Woocommerce Tabs plugin for WordPress is susceptible to Local File Inclusion due to inadequate input validation on the template parameter within t...

8.8CVSS6.7AI score0.00331EPSS
SaveExploits0References8
Patchstack
Patchstack
•added 2025/11/17 11:14 p.m.•14 views

WordPress Category and Product Woocommerce Tabs plugin <= 1.0 - Authenticated (Contributor+) Local File Inclusion vulnerability

Authenticated Contributor+ Local File Inclusion vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Category and Product Woocommerce Tabs versions = 1.0...

8.8CVSS7.1AI score0.00331EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2025/09/09 5:08 p.m.•10 views

WordPress Additional Custom Product Tabs for WooCommerce Plugin <= 1.7.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Additional Custom Product Tabs for WooCommerce versions = 1.7.3...

6.5CVSS6AI score0.00165EPSS
SaveExploits0Affected Software1
OSV
OSV
•added 2022/11/18 7:15 p.m.•13 views

CVE-2022-43463

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Custom Product Tabs for WooCommerce plugin = 1.7.9 on WordPress...

4.8CVSS5.8AI score0.00419EPSS
SaveExploits0References1
Rows per page
Query Builder