Product Tabs For Woocommerce Vulnerabilities

The Additional Custom Product Tabs for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.7.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level access and above, to inject arbit...

CVSS:

6.4

Affected:

up to 1.7.3

Fixed in:

1.7.4

Disclosed:

Sep 9, 2025

CVE-2025-58985 on NVD →

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Additional Custom Product Tabs for WooCommerce allows Stored XSS. This issue affects Additional Custom Product Tabs for WooCommerce: from n/a through 1.7.3.

Affected:

up to 1.7.4

Fixed in:

1.7.4

Disclosed:

Sep 9, 2025

CVE-2025-58985 on NVD →

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Additional Custom Product Tabs for WooCommerce allows Stored XSS. This issue affects Additional Custom Product Tabs for WooCommerce: from n/a through 1.7.0.

Affected:

up to 1.7.1

Fixed in:

1.7.1

Disclosed:

Apr 15, 2025

CVE-2025-26749 on NVD →

The Additional Custom Product Tabs for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.7.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject...

CVSS:

6.4

Affected:

up to 1.7.0

Fixed in:

1.7.1

Disclosed:

Apr 11, 2025

CVE-2025-26749 on NVD →