Is CVE-2026-13718 being exploited?

No public exploit is currently tracked.

Back

CVE-2026-13718

Description

The Tabs Responsive WordPress plugin through 2.5 does not sanitize the content of WooCommerce product tabs before storing and rendering it, allowing a shop manager to store JavaScript that executes when any user, including an administrator, views the product page.