Tab Ultimate

Tab Ultimate has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 2 are fixed as of October 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for Tab Ultimate has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Tab Ultimate is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Tab Ultimate vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-62060

Tab Ultimate <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2025-10-16 00:00	Tab Ultimate <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Tab Ultimate <= 1.8	`CVE-2025-62060`	6.4 Medium	Muhammad Yudha - DJ	Yes
2023-10-22 00:00	Tab Ultimate <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Tab Ultimate <= 1.3	`CVE-2023-5667`	6.4 Medium	István Márton	Yes

Showing 1–2 of 2 reports

Latestv2.0.4

Tab Ultimate

Author

Themepoints

4.0(4)

80/100

Last Updated

2026-09-22 (1mo ago)

Active Installs

1,000+

Downloads

14,830

Requires WP

4.0+

Requires PHP

Tested up to

WP 7.1.3

Created

2015-07-02 (12y ago)

Tab Shortcode Ultimate is yet another simple, responsive, lightweight tabs plugin for creating responsive tabbed panels with unlimited options and transition animations support. This plugin allows you to use shortcode to display tabs post/page or widget via unique post ID. You can easily Manage tabs via options page. Live Preview Documentation Need Support 🚀 Key Features & Options Multiple Tab Layouts: Easily switch between Horizontal and Vertical tab layouts. Flexible Tabs Alignment: Align your navigation tabs to the Left, Center, Right, or Justified. Menu Styles & Positions: Choose custom menu styles and control menu positions (top/bottom). Auto Open Tab Index: Set a specific default active tab to load automatically. Activator Events: Switch user interaction between Click and Hover. Auto Height Mode: Dynamic content height control for seamless layouts. Smooth Transitions & Animations: Configure entrance effects with customizable animation speeds. URL Hash Links: Direct linking support to open specific tabs via URL parameters. Live Preview: Real-time preview support right inside your WordPress dashboard. Clean OOP Code & High Performance: Built on modern Object-Oriented Programming principles with CSS Custom Properties (CSS Variables) for optimal speed. Fully Responsive: Looks stunning on all mobile devices, tablets, and desktops. Advanced Transition Effects (fade, slideUp, slideRight, flip, rotate, scaleDown, etc.) Drag & Drop Tab item sorting from the backend Comprehensive color customization (titles, active states, hover texts, borders, and content backgrounds) 24/7 Dedicated Support Forum

View on WordPress.org