JetTabs

JetTabs has 11 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 11 are fixed as of October 2026. Their average CVSS score is 6.1, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2025 was the busiest year with 6 disclosures.

The most common weakness is Cross-Site Scripting, behind 5 of the records (45%). Other recurring categories include Missing Authorization, Cross-Site Request Forgery (CSRF).

Every one of the 11 issues recorded for JetTabs has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, most of them (5) reported by stealthcopter.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all JetTabs vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2024-7146

JetTabs <= 2.2.3 - Authenticated (Contributor+) Arbitrary Local File Inclusion

Read the full analysis

Vulnerability Records

11 records


2026-09-17 11:58	JetTabs <= 2.3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting JetTabs <= 2.3.3.1	`CVE-2026-66573`	6.4 Medium	nh4tvd	Yes
2025-12-30 00:00	JetTabs <= 2.2.12 - Missing Authorization JetTabs <= 2.2.12	`CVE-2025-68498`	4.3 Medium	Bonds	Yes
2025-12-30 00:00	JetTabs <= 2.2.12 - Authenticated (Contributor+) Stored Cross-Site Scripting JetTabs <= 2.2.12	`CVE-2025-68499`	6.4 Medium	Bonds	Yes
2025-07-30 00:00	JetTabs <= 2.2.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting JetTabs <= 2.2.9.1	`CVE-2025-54687`	6.4 Medium	stealthcopter	Yes
2025-07-16 00:00	JetTabs <= 2.2.9 - Authenticated (Subscriber+) Information Exposure JetTabs <= 2.2.9	`CVE-2025-53985`	4.3 Medium	stealthcopter	Yes
2025-07-16 00:00	JetTabs <= 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting JetTabs <= 2.2.9	`CVE-2025-53984`	6.4 Medium	stealthcopter	Yes
2025-04-17 00:00	JetTabs <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting JetTabs <= 2.2.7	`CVE-2025-39450`	6.4 Medium	stealthcopter	Yes
2024-08-15 00:00	JetTabs <= 2.2.3 - Authenticated (Contributor+) Arbitrary Local File Inclusion JetTabs <= 2.2.3	`CVE-2024-7146`	8.8 High	stealthcopter	Yes
2023-11-28 00:00	Multiple Plugins by Crocoblock <= (Various Versions) - Cross-Site Request Forgery JetTabs <= 2.1.25.1	`CVE-2023-48762`	4.3 Medium	Rafie Muhammad	Yes
2023-11-28 00:00	Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization to Unauthenticated Unauthorized Action JetTabs <= 2.1.25.1	`CVE-2023-48760`	7.3 High	Rafie Muhammad	Yes

Showing 1–10 of 11 reports