CVE-2025-68498: WordPress JetTabs plugin <= 2.2.12 - Broken Access Control vulnerability
Published Dec 29, 2025
·Updated
Missing Authorization vulnerability in Crocoblock JetTabs jet-tabs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetTabs: from n/a through <= 2.2.12.
Affected Software
1 affected component
Crocoblock JetTabs<=2.2.12
Event History
Dec 29, 2025
CVE Published
via MITRE·11:13 PM
Data Sourced
via MITRE·11:13 PM
DescriptionSeverityWeakness
Dec 30, 2025
Data Sourced
via NVD·12:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-68498?
CVE-2025-68498 has a medium severity level due to its potential for unauthorized access.
2
How do I fix CVE-2025-68498?
To fix CVE-2025-68498, upgrade JetTabs to version 2.2.13 or later to ensure proper access control.
3
What is the impact of CVE-2025-68498?
The impact of CVE-2025-68498 is that it allows unauthorized users to access restricted content due to misconfigured access control settings.
4
Who is affected by CVE-2025-68498?
Users of JetTabs from versions n/a through 2.2.12 are affected by CVE-2025-68498.
5
Is CVE-2025-68498 related to other vulnerabilities?
CVE-2025-68498 is specifically related to improper authorization control and does not directly reference other vulnerabilities.