CVE Database /
CVE-2022-28666
CVE · Medium
CVE-2022-28666 — Custom Product Tabs for WooCommerce [yikes-inc-easy-custom-woocommerce-product-tabs] < 1.7.9
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-28666
|
Custom Product Tabs for WooCommerce [yikes-inc-easy-custom-woocommerce-product-tabs] < 1.7.9 |
Improper Authentication |
Medium
5.3
|
< 1.7.9
|
1.7.9 |
2022-06-28 |
—
|
CVE-2022-28666
The Custom Product Tabs for WooCommerce plugin through version 1.7.7 contains a broken access control vulnerability that allows unauthorized modification of the yikes-the-content-toggle option. This flaw was discovered by Tien Nguyen Anh working with the Patchstack Alliance. Users should upgrade to version 1.7.9 or later to remediate this issue.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings