Input validation vulnerability in WP Tabs 2.2.6

The WP Tabs add-on for WordPress has a security issue that allows hackers to inject harmful code into website settings. This can happen in all versions up to and including version 2.2.6. The problem is caused by not properly filtering and sanitizing user input and output. As a result, attackers with high-level access to the website can insert malicious code that will run when users visit certain pages. This only affects websites with multiple installations or where a security feature called “unfiltered_html” has been turned off.