JetTabs

JetTabs has 10 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 10 are fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2025 was the busiest year with 6 disclosures.

The most common weakness is Cross-Site Scripting, behind 4 of the records (40%). Other recurring categories include Missing Authorization, Cross-Site Request Forgery (CSRF).

Every one of the 10 issues recorded for JetTabs has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, most of them (5) reported by stealthcopter.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all JetTabs vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2024-7146

JetTabs <= 2.2.3 - Authenticated (Contributor+) Arbitrary Local File Inclusion

Read the full analysis

Vulnerability Records

10 records


2025-12-30 00:00	JetTabs <= 2.2.12 - Missing Authorization JetTabs <= 2.2.12	`CVE-2025-68498`	4.3 Medium	Bonds	Yes
2025-12-30 00:00	JetTabs <= 2.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting JetTabs <= 2.2.12	`CVE-2025-68499`	6.4 Medium	Bonds	Yes
2025-07-30 00:00	JetTabs <= 2.2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting JetTabs <= 2.2.9.1	`CVE-2025-54687`	6.4 Medium	stealthcopter	Yes
2025-07-16 00:00	JetTabs <= 2.2.9 - Authenticated (Subscriber+) Information Exposure JetTabs <= 2.2.9	`CVE-2025-53985`	4.3 Medium	stealthcopter	Yes
2025-07-16 00:00	JetTabs <= 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting JetTabs <= 2.2.9	`CVE-2025-53984`	6.4 Medium	stealthcopter	Yes
2025-04-17 00:00	JetTabs <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting JetTabs <= 2.2.7	`CVE-2025-39450`	6.4 Medium	stealthcopter	Yes
2024-08-15 00:00	JetTabs <= 2.2.3 - Authenticated (Contributor+) Arbitrary Local File Inclusion JetTabs <= 2.2.3	`CVE-2024-7146`	8.8 High	stealthcopter	Yes
2023-11-28 00:00	Multiple Plugins by Crocoblock <= (Various Versions) - Cross-Site Request Forgery JetTabs <= 2.1.25.1	`CVE-2023-48762`	4.3 Medium	Rafie Muhammad	Yes
2023-11-28 00:00	Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization to Unauthenticated Unauthorized Action JetTabs <= 2.1.25.1	`CVE-2023-48760`	7.3 High	Rafie Muhammad	Yes
2023-11-28 00:00	Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization JetTabs <= 2.1.25.1	`CVE-2023-48761`	6.3 Medium	Rafie Muhammad	Yes

Showing 1–10 of 10 reports