Custom Product Tabs for WooCommerce
Custom Product Tabs for WooCommerce has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2022 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 1 of the records (33%). Other recurring categories include Deserialization Of Untrusted Data, Missing Authorization.
Every one of the 3 issues recorded for Custom Product Tabs for WooCommerce has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, one record each. Custom Product Tabs for WooCommerce is installed on roughly 80,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2024-11465Custom Product Tabs for WooCommerce <= 1.8.5 - Authenticated (Shop Manager+) PHP Object Injection
Read the full analysisVulnerability Records
Custom Product Tabs for WooCommerce
Author
Evan Herman
This plugin extends WooCommerce to allow shop owners to add custom tabs to products. The tabs are displayed on the individual product pages to the right of the default “Description” tab. Individual product tabs are managed on the WooCommerce Edit Product screen and can be added on a per product basis. You can also create saved tabs and add them to multiple products as needed. Tabs can be easily added, deleted and rearranged. Tab content areas use the standard WordPress text editor and may contain text, images, HTML or shortcodes. If you experience any problems, please submit a ticket on our Free WordPress Support Forums and we’ll look in to it as soon as possible. This plugin is compatible with WPML. Upgrade to Custom Product Tabs Pro for great enhanced features!
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C