← WordPress Vulnerabilities
WordPress security by component

JetTabs

JetTabs is a WordPress component with 6 published CVE records in this archive. The latest tracked vulnerability was published Dec 30, 2025; the highest CVE/CNA score is 6.5.

Plugin slug: jet-tabs

CVE-2025-68499: JetTabs: Cross-site scripting

JetTabs is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedDec 30, 2025
Safe version guidanceSee mitigation notes
Safe version
Dec 30, 2025 CVE-2025-68499
JetTabs: Cross-site scripting
JetTabs is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.5
NVDPending
Dec 30, 2025 CVE-2025-68498
JetTabs: A security weakness
JetTabs is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE6.5
NVDPending
Aug 20, 2025 CVE-2025-53985
JetTabs: A security weakness
JetTabs is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE6.5
NVDPending
Aug 14, 2025 CVE-2025-54687
JetTabs: Cross-site scripting
JetTabs is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.5
NVDPending
Jul 16, 2025 CVE-2025-53984
JetTabs: Cross-site scripting
JetTabs is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.5
NVDPending
May 19, 2025 CVE-2025-39450
JetTabs: Cross-site scripting
JetTabs is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.5
NVDPending