Tab Ultimate

Tab Ultimate has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for Tab Ultimate has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Tab Ultimate is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Tab Ultimate vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-62060

Tab Ultimate <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2025-10-16 00:00	Tab Ultimate <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Tab Ultimate <= 1.8	`CVE-2025-62060`	6.4 Medium	Muhammad Yudha - DJ	Yes
2023-10-22 00:00	Tab Ultimate <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Tab Ultimate <= 1.3	`CVE-2023-5667`	6.4 Medium	István Márton	Yes

Showing 1–2 of 2 reports

Latestv2.0.2

Tab Ultimate

Author

Themepoints

4.0(4)

80/100

Last Updated

2026-08-31 (13d ago)

Active Installs

1,000+

Downloads

14,134

Requires WP

4.0+

Requires PHP

Tested up to

WP 7.0.4

Created

2015-07-02 (11y ago)

Tab Shortcode Ultimate is yet another simple, responsive, lightweight jQuery tabs plugin for creating responsive tabbed panels with unlimited options and transition animations support. This plugin allows you to use shortcode to display tabs post/page or widget via unique post ID. You can easily Manage tabs via options page. Live Preview Documentation Need Support Plugin Features Clean Design & Code. Fully responsive. Tabs Transitions: fade, slideUp, slideRight, flip, rotate, swingRight, scaleDown, scaleUp, etc. Events: Switch between hover and click events Accordion Transitions: normal and slide. Collapsible: Ability to collapse all accordions on smaller devices. Initial Tab : Choose which tab to display initially. Enable Custom Post. Tab Support wysiwyg text editor. Create Tab by group. Unlimited Tab Support. All Browser support. Use via shortcode. Support post/page or widget. Enable tinymce button. And many more. Premium Features Clean Design & Code. Fully responsive. Widget Ready. Tabs Transitions: fade, slideUp, slideRight, flip, rotate, swingRight, scaleDown, scaleUp, etc. Events: Switch between hover and click events Accordion Transitions: normal and slide. Collapsible: Ability to collapse all accordions on smaller devices. Initial Tab : Choose which tab to display initially. Enable Custom Post. Tab Support wysiwyg text editor. Create Tab by group. Cross-browser compatibility. Drag & Drop Tab items sorting. Add and remove Tab item from backend. Use via short-codes. Tab Menu Position (top/bottom). Tab Open on hover. Tab header title font size. Tab header title font color. Active Tab header title font color. Tab title background color. Tab Content background color. Support Any videos (Ex: youtube, vimeo ). Highly customized for User Experience. Unlimited Tab anywhere in the themes or template. Work in all browsers and mobile devices. Life Time Self hosted auto updated enable. 24/7 dedicated support forum. Unlimited Domain. Well Documentation. And much more! Upgrade to Premium!» Video Tutorial Available

View on WordPress.org