Description
Contributor Cross Site Scripting (XSS) in WP Tab Widget <= 1.2.11 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MyThemeShop | WP Tab Widget | ≤ 1.2.11 | — |
Medium · 6.5
CVE-2026-66646
EUVD-2026-60930GHSA-2cw9-f6hc-22wm
WordPress WP Tab Widget plugin <= 1.2.11 - Cross Site Scripting (XSS) vulnerability
Published Aug 18, 2026 · Updated Aug 18, 2026 · Assigned by Patchstack