Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-2600

Auto-hyperlink URLs <= 5.4.1 - Tab Nabbing

Description

The Auto-hyperlink URLs WordPress plugin through 5.4.1 does not set rel="noopener noreferer" on generated links, which can lead to Tab Nabbing by giving the target site access to the source tab through the window.opener DOM object.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Auto-hyperlink URLs

  • 5.4.1 to ≤ 5.4.1affected

References