Is Yikes Inc Easy Custom Woocommerce Product Tabs safe?

Plugin details

• Slug: yikes-inc-easy-custom-woocommerce-product-tabs
• Requires PHP: 7.4+
• Max supported PHP (analyzed): 8.4

Known vulnerabilities

• Custom Product Tabs for WooCommerce [yikes-inc-easy-custom-woocommerce-product-tabs] < 1.7.9 [CVE-2022-28666, WordPress Custom Product Tabs for WooCommerce plugin <= 1.7.7 - Broken Access Control vulnerability leading to &yikes-the-content-toggle option update, Custom Product Tabs for WooCommerce &lt; 1.7.8 - Unauthenticated Toggle Content Setting Update, Custom Product Tabs for WooCommerce <= 1.7.7 - Subscriber+ Settings Update]
• Custom Product Tabs for WooCommerce [yikes-inc-easy-custom-woocommerce-product-tabs] < 1.8.0 [CVE-2022-43463, WordPress Custom Product Tabs for WooCommerce plugin <= 1.7.9 - Auth. Stored Cross-Site Scripting (XSS) vulnerability, Custom Product Tabs for WooCommerce <= 1.7.9 - Authenticated (Administrator+) Stored Cross-Site Scripting, Custom Product Tabs for WooCommerce &lt; 1.8.0 - Admin+ Stored XSS]
• Custom Product Tabs for WooCommerce [yikes-inc-easy-custom-woocommerce-product-tabs] < 1.8.6 [CVE-2024-11465, WordPress Custom Product Tabs for WooCommerce Plugin <= 1.8.5 is vulnerable to PHP Object Injection, Custom Product Tabs for WooCommerce <= 1.8.5 - Authenticated (Shop Manager+) PHP Object Injection, EUVD-2024-34211]

Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.

Safer / more established alternatives

• WPvivid — Backup, Migration & Staging — 900000+ active installs — max PHP <8.0
• Post Duplicator — 200000+ active installs — max PHP 8.4
• Duplicate Menu — 100000+ active installs — max PHP 8.4
• Theme My Login — 60000+ active installs — max PHP 8.4
• Login Logo — 40000+ active installs — max PHP 8.4