Skip to content
OpenAdvisories
Medium · 4.8 CVE-2022-43463 EUVD-2022-46464GHSA-x42c-c4qv-55qm

WordPress Custom Product Tabs for WooCommerce plugin <= 1.7.9 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

Published Nov 18, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: YIKES Product: Custom Product Tabs for WooCommerce (WordPress plugin) Category: Web / CMS

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Custom Product Tabs for WooCommerce plugin <= 1.7.9 on WordPress.

Affected products

VendorProductAffectedFixed
YIKES Custom Product Tabs for WooCommerce (WordPress plugin) <= 1.7.9 – ≤ 1.7.9 —

References