nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-40215 CVE-2022-40215
LOW
WordPress Tabs plugin <= 3.7.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
Record summary
CVE-2022-40215 has a selected CVSS score of 3.4 (low).
Description
Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities in Tabs plugin <= 3.7.1 at WordPress.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 20, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Tabs (WordPress plugin)Browse Biplob Adhikari / Tabs (WordPress plugin) | CVE List | <= 3.7.1 to ≤ 3.7.1 | affected |
References
3patchstack.comConfirmation
https://patchstack.com/database/vulnerability/vc-tabs/wordpress-tabs-plugin-3-7-1-multiple-authenticated-stored-cross-site-scripting-xss-vulnerabilities/_s_id=cve wordpress.orgConfirmation
https://wordpress.org/plugins/vc-tabs