CVE-2025-48134

概要

参考情報

• patchstack.com/database/Wordpress/Plugin/wp-expand-tabs-free/vulnerability/wordpress-wp-tabs-2-2-11-php-object-injection-vulnerability · Third Party Advisory

wp tabs のその他の脆弱性

• CVE-2024-11503中 6.1The WP Tabs WordPress plugin before 2.2.7 does not sanitise and escape some of its settings, which could allow high privilege users such as…
• CVE-2023-52124中 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ShapedPlugin LLC WP Tabs – Responsive …
• CVE-2023-25065高 8.8Cross-Site Request Forgery (CSRF) vulnerability in ShapedPlugin WP Tabs – Responsive Tabs Plugin for WordPress plugin <= 2.1.14 versions.
• CVE-2023-0071中 5.4The WP Tabs WordPress plugin before 2.1.17 does not validate and escape some of its shortcode attributes before outputting them back in a pa…