CVE-2026-39776

wpshopmart Tabs

Published 6 Oct 2026 · updated 6 Oct 2026 · Deferred

8.0 High · CVSS 3.1, patchstack.com

Description

Editor Remote Code Execution (RCE) in Tabs <= 2.5 versions.

References

patchstack.com/database/wordpress/plugin/tabs-responsive/vulnerability/wordpress-tabs-plugin-2-5-remote-code-execution-rce-vulnerability?_s_id=cve