Auto-hyperlink URLs <= 5.4.1 - Tab Nabbing
mediumThe Auto-hyperlink URLs WordPress plugin through 5.4.1 does not set rel="noopener noreferer" on generated links, which can lead to Tab Nabbing by giving the target site access to the source tab through the window.opener DOM object.
- CVSS:
- 5.4
- Affected:
- up to 5.4.1
- Fix:
- No patched version reported
- Disclosed:
- Aug 1, 2022