Medium severity5.3NVD Advisory· Published Jul 21, 2022· Updated Jun 17, 2026

CVE-2022-28666

Description

Broken Access Control vulnerability in YIKES Inc. Custom Product Tabs for WooCommerce plugin <= 1.7.7 at WordPress leading to &yikes-the-content-toggle option update.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Custom Product Tabs for WooCommercellm-fuzzy
Range: <=1.7.7
Yikes, Inc./Custom Product Tabs For Woocommercellm-fuzzy
Range: <=1.7.7
Yikes, Inc./Custom Product Tabs For Woocommerce (wordpress Plugin)v5
Range: n/a

Patches

Vulnerability mechanics

References

patchstack.com/database/vulnerability/yikes-inc-easy-custom-woocommerce-product-tabs/wordpress-custom-product-tabs-for-woocommerce-plugin-1-7-7-broken-access-control-vulnerability-leading-to-yikes-the-content-toggle-option-updatenvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000