Tabs – Responsive Tabs with WooCommerce Product Tab Extension

Tabs – Responsive Tabs with WooCommerce Product Tab Extension has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2024; 3 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 7.2, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 2 high. 2022 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (50%). Other recurring categories include Authorization Bypass Through User-Controlled Key, Improper Authorization.

3 of the records (75%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2024.

2 independent researchers contributed these findings, most of them (2) reported by R3N0.

Strategic Overview

Avg CVSSHigh

7.2/ 10

Patch Coverage75%

Open

Fixed

Get automatic notifications for all Tabs – Responsive Tabs with WooCommerce Product Tab Extension vulnerabilities before they are exploited.

Most severe open issueCVSS 4.4CVE-2024-37120

Tabs <= 4.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

4 records


2024-06-20 00:00	Tabs <= 4.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting Tabs <= 4.0.6	`CVE-2024-37120`	4.4 Medium	Jean Tirstan T	No
2022-09-22 00:00	Tabs <= 3.7.1 - Authenticated (Administrator+) Stored Cross-Site Scripting Tabs <= 3.7.1	`CVE-2022-40215`	7.2 High	R3N0	Yes
2022-07-26 00:00	Tabs – Responsive Tabs with WooCommerce Product Tab Extension <= 3.6.0 - Authenticated (Admin+) Arbitrary Options Update Tabs <= 3.6.0	`CVE-2022-36375`	7.2 High	R3N0	Yes
2021-12-20 00:00	Responsive Tabs with WooCommerce Product Tab Extension <= 3.5.4 - Unauthenticated Arbitrary Option Update Tabs < 3.6.0	`N/A`	9.8 Critical	Anonymous	Yes

Showing 1–4 of 4 reports