High · 7.1 CVE-2025-46522 EUVD-2025-11994GHSA-v6r3-x6mm-4r84

WordPress Tabs plugin <= 4.0.3 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability

Published Apr 24, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Billy Bryant Tabs gt-tabs allows Stored XSS.This issue affects Tabs: from n/a through <= 4.0.3.

Vendor	Product	Affected	Fixed
Billy Bryant	Tabs	≤ 4.0.3	—