6.8
Medium
CVE-2026-13718 The Tabs Responsive WordPress plugin through 2.5 does not sanitize the content of WooCommerce product tabs before…
Description
The Tabs Responsive WordPress plugin through 2.5 does not sanitize the content of WooCommerce product tabs before storing and rendering it, allowing a shop manager to store JavaScript that executes when any user, including an administrator, views the product page.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Tabs Responsive 2.5 | earliest → 2.5 | No fix stated |