CVE-2022-1583CWE-1022

External Links in New Window / New Tab < 1.43 - Tabnabbing

published May 30, 2022

CVSS
—
EPSS
1%
Percentile
71.0
In the wild
Unconfirmed
What it is

The External Links in New Window / New Tab WordPress plugin before 1.43 does not ensure window.opener is set to "null" when links to external sites are clicked, which may enable tabnabbing attacks to occur.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01337 · 71.0th percentile
Weakness
CWE-1022 · Use of Web Link to Untrusted Target with window.opener Access
Published
2022-05-30T08:36Z
EPSS history
Timeline
  • 30 MAY 08:36Z
    External Links in New Window / New Tab < 1.43 - Tabnabbing
    cvelistv5