Lucene search
WPScanCVELIST:CVE-2022-2600HistoryAug 22, 2022 - 3:05 p.m.
CVE-2022-2600 Auto-hyperlink URLs <= 5.4.1 - Tab Nabbing
2022-08-2215:05:12
CWE-1022
WPScan
www.cve.org
2
cve-2022-2600
auto-hyperlink
wordpress
tab nabbing
vulnerability
EPSS
0.001
Percentile
40.2%
The Auto-hyperlink URLs WordPress plugin through 5.4.1 does not set rel=“noopener noreferer” on generated links, which can lead to Tab Nabbing by giving the target site access to the source tab through the window.opener DOM object.
CNA Affected
[
{
"product": "Auto-hyperlink URLs",
"vendor": "Unknown",
"versions": [
{
"lessThanOrEqual": "5.4.1",
"status": "affected",
"version": "5.4.1",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2022-2600
2022-08-22 15:15:15
patchstack
patchstack
WordPress Auto-hyperlink URLs plugin <= 5.4.1 - Tab Nabbing vulnerability
2022-08-01 00:00:00
cve
cve
CVE-2022-2600
2022-08-22 15:15:15
prion
prion
Code injection
2022-08-22 15:15:00