CVE-2022-1583 - External Links in New Window / New Tab < 1.43

Back Back to CVE browser

MEDIUM

External Links in New Window / New Tab < 1.43 - Tabnabbing

Published May 30, 2022

6.5

MEDIUM

CVSS 3.1

EPSS 1.32%

Description

The External Links in New Window / New Tab WordPress plugin before 1.43 does not ensure window.opener is set to "null" when links to external sites are clicked, which may enable tabnabbing attacks to occur.

Affected products

Vendor n/a Product External Links in New Window / New Tab Default
unknown
Affected
- ≥ 1.43, < 1.43

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	External Links in New Window / New Tab	unknown	Affected ≥ 1.43, < 1.43

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-1022

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-24874
Advisory
https://wpscan.com/vulnerability/aa9d727c-4d17-4220-b8cb-e6dec30361a9
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-24874		Advisory
https://wpscan.com/vulnerability/aa9d727c-4d17-4220-b8cb-e6dec30361a9		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner WPScan

Published May 30, 2022

Updated Aug 3, 2024

Reserved May 4, 2022

Link CVE-2022-1583

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-1583

Red Hat

No data

ENISA EUVD

Assigner WPScan

Published May 30, 2022

Updated Aug 3, 2024

Link EUVD-2022-24874

GitHub

No data