CVE-2022-2600
Medium
Description
The Auto-hyperlink URLs WordPress plugin through 5.4.1 does not set rel="noopener noreferer" on generated links, which can lead to Tab Nabbing by giving the target site access to the source tab through the window.opener DOM object.
SeverityMedium
CVSS5.4
Exploit probability—
ProductAuto-hyperlink Urls
PublishedAug 22, 2022
First seenAug 22, 2022
Weakness typeCWE-1022CWE-1022
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| auto-hyperlink_urls_project auto-hyperlink_urls | v ≤ 5.4.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.