CVE-2026-13718
The Tabs Responsive WordPress plugin through 2.5 does not sanitize the content of WooCommerce product tabs before storing and rendering it, allowing a shop manager to store JavaScript that executes when any user, including an administrator, views the product page.
- Published Oct 2, 2026
- CVSS 6.8 medium
- 0.2% chance of exploitation in the next 30 days (EPSS)