Responsive Horizontal Vertical And Accordion Tabs Vulnerabilities

The WP Responsive Tabs horizontal vertical and accordion Tabs plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.1.17 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated a...

CVSS:

9.9

Affected:

up to 1.1.17

Fixed in:

1.1.18

Disclosed:

Mar 28, 2024

CVE-2024-30497 on NVD →

The WP Responsive Tabs horizontal vertical and accordion Tabs plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.1.17 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above...

CVSS:

6.4

Affected:

up to 1.1.17

Fixed in:

1.1.18

Disclosed:

Mar 15, 2024

CVE-2024-27989 on NVD →

The WP Responsive Tabs horizontal vertical and accordion Tabs plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.1.15 due to insufficient input sanitization and output escaping on the $setacrionpage value. This makes it possible for unauthenticated attackers to inje...

CVSS:

6.1

Affected:

up to 1.1.15

Fixed in:

1.1.16

Disclosed:

May 9, 2023

CVE-2023-24409 on NVD →

The WP Responsive Tabs horizontal vertical and accordion Tabs plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and including, 1.1.15 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to in...

CVSS:

6.1

Affected:

up to 1.1.15

Fixed in:

1.1.16

Disclosed:

Apr 19, 2023

CVE-2023-2184 on NVD →