CVE-2026-13718 – The Tabs Responsive WordPress plugin through 2.5 does not sanitize the content of WooComm

The Tabs Responsive WordPress plugin through 2.5 does not sanitize the content of WooCommerce product tabs before storing and rendering it, allowing a shop manager to store JavaScript that executes when any user, including an administrator, views the product page.