CVE-2022-1583

External Links in New Window / New Tab < 1.43 - Tabnabbing

State: Published
Severity: Not scored
Published: May 30, 2022
Updated: Aug 3, 2024
Reserved: May 4, 2022

Description

The External Links in New Window / New Tab WordPress plugin before 1.43 does not ensure window.opener is set to "null" when links to external sites are clicked, which may enable tabnabbing attacks to occur.

Scores

The record has no CVSS score.

Weaknesses

CWE-1022 Use of Web Link to Untrusted Target with window.opener Access

Affected Products

Product	Versions
External Links in New Window / New TabUnknown	1.43 to before 1.43Affected

References

https://wpscan.com/vulnerability/aa9d727c-4d17-4220-b8cb-e6dec30361a9

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.