CVE-2022-2600

🗓️ 22 Aug 2022 15:05:12Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 59 Views

The Auto-hyperlink URLs WordPress plugin through 5.4.1 does not set rel="noopener noreferer" on generated links, which can lead to Tab Nabbing by giving the target site access to the source tab through the window.opener DOM object

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2022-2600	22 Aug 202215:15	–	attackerkb
CNNVD	WordPress plugin Auto-hyperlink URLs 安全漏洞	22 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-2600 Auto-hyperlink URLs <= 5.4.1 - Tab Nabbing	22 Aug 202215:05	–	cvelist
EUVD	EUVD-2022-34847	3 Oct 202520:07	–	euvd
NVD	CVE-2022-2600	22 Aug 202215:15	–	nvd
Patchstack	WordPress Auto-hyperlink URLs plugin <= 5.4.1 - Tab Nabbing vulnerability	1 Aug 202200:00	–	patchstack
Prion	Code injection	22 Aug 202215:15	–	prion
Positive Technologies	PT-2022-17629 · WordPress · Auto-Hyperlink Urls	22 Aug 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-2600	23 May 202501:08	–	redhatcve

NVD

Vulners

Node

auto-hyperlink_urls_project auto-hyperlink_urlsRange≤5.4.1wordpress

[
  {
    "product": "Auto-hyperlink URLs",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThanOrEqual": "5.4.1",
        "status": "affected",
        "version": "5.4.1",
        "versionType": "custom"
      }
    ]
  }
]