Remove tabs and fields from WooCommerce
Remove tabs and fields from WooCommerce has one disclosed vulnerability in the WordSec catalog, all reported in 2022; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Remove tabs and fields from WooCommerce has a vendor fix available, so running the current release closes it.
All of these findings were reported by WPScanTeam. Remove tabs and fields from WooCommerce is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.5.10.
Remove tabs and fields from WooCommerce <= 1.68 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records

Remove tabs and fields from WooCommerce
Author
Puvox Software
[ ✅ 𝐒𝐄𝐂𝐔𝐑𝐄 𝐏𝐋𝐔𝐆𝐈𝐍𝐒 b𝓎 𝒫𝓊𝓋𝑜𝓍 ] : • Revised for security to be reliable and free of vulnerability holes. • Efficient, not to add any extra load/slowness to site. • Don’t collect private data. Plugin Description Remove extra tabs and fields from WooCommerce items & checkout. You should enter WooCommerce > Settings > RTF tab to maange the plugin. You can remove the following tabs: General Inventory Shipping Linked Products Attributes Variations Advanced or sub-fields from those tabs Sku Weight Dimensions Tax also Product Types: Simple product Grouped product External/Affiliate product Variable product and fields (from product or checkout page): Additional_information Billing Descirption Reviews Billing first name Billing last name Billing address1 Billing address2 Billing city Billing postcode Billing country Billing state Billing phone Billing email Shipping first name Shipping last name Shipping company Shipping address1 Shipping address2 Shipping city Shipping postcode Shipping country Shipping state Order Comments Available Options See all available options and their description on plugin’s settings page.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C