CVE-2022-2600: Use of Web Link to Untrusted Target with window.opener Access

The Auto-hyperlink URLs WordPress plugin through 5.4.1 does not set rel="noopener noreferer" on generated links, which can lead to Tab Nabbing by giving the target site access to the source tab through the window.opener DOM object...

PT-2022-17629 · WordPress · Auto-Hyperlink Urls

Name of the Vulnerable Software and Affected Versions: Auto-hyperlink URLs WordPress plugin versions through 5.4.1 Description: The issue allows for Tab Nabbing, giving the target site access to the source tab through the window.opener DOM object, because the plugin does not set rel="noopener...