CVE-2022-2600
N/A
N/A
Summary
The Auto-hyperlink URLs WordPress plugin through 5.4.1 does not set rel="noopener noreferer" on generated links, which can lead to Tab Nabbing by giving the target site access to the source tab through the window.opener DOM object.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Unknown | Auto-hyperlink URLs | 5.4.1 <= 5.4.1 | affected |
Weaknesses
- CWE-1022: CWE-1022 Use of Web Link to Untrusted Target with window.opener Access
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.