The Custom Product Tabs Lite for WooCommerce plugin for WordPress has a security issue that makes it vulnerable to a type of attack called PHP Object Injection. This can happen when the plugin receives input from a parameter called ‘frs_woo_product_tabs’ that is not trustworthy. This allows hackers who are logged in with Shop Manager-level access or higher to inject a PHP Object, which could potentially cause harm to the website. There is currently no known way for the attacker to access the system, but if there is another plugin or theme installed that is also vulnerable, it could allow the attacker to delete files, access private information, or run code without permission.