Additional Custom Product Tabs for WooCommerce
Additional Custom Product Tabs for WooCommerce has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of October 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).
Every one of the 2 issues recorded for Additional Custom Product Tabs for WooCommerce has a vendor fix available, so running the current release closes all known holes.
All of these findings were reported by Muhammad Yudha - DJ. Additional Custom Product Tabs for WooCommerce is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2025-58985Additional Custom Product Tabs for WooCommerce <= 1.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Additional Custom Product Tabs for WooCommerce
Author
WPFactory
woocommerceAdditional Custom Product Tabs for WooCommerce plugin lets you: Customize WooCommerce standard product tabs. Add custom product tabs globally for all products, or on per product basis. And more… ✅ Standard WooCommerce Product Tabs For standard WooCommerce product tabs (i.e., “Description”, “Additional information” and “Reviews”) you can: Remove tab completely for all products. Change tab’s position. Change tab’s title. ✅ Custom Product Tabs For each custom product tab you can set: Tab’s title. Tab’s ID (i.e., link). Tab’s position. Tab’s content. For each global (i.e., all products) product tab you can also set products/categories to show/hide it for. ✅ Shortcodes In product tab’s title and content you can use plugin’s shortcodes: [alg_wc_pt_product_meta] and [alg_wc_pt_product_function]. This is especially useful in global (i.e., all products) tabs. For example, you can output some custom field value in your custom tabs for all products at once: [alg_wc_pt_product_meta key="my_custom_field"] Or, for example, you could add stock quantity info: Stock: [alg_wc_pt_product_function name="get_stock_quantity"] 🗘 Feedback We are open to your suggestions and feedback. Thank you for using or trying out one of our plugins! Visit plugin site. ℹ More The plugin is “High-Performance Order Storage (HPOS)” compatible.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C