CVE-2022-1583CWE-1022

CVE-2022-1583: vulnerability in External Links in New Window / New Tab

External Links in New Window / New Tab < 1.43 - Tabnabbing

Published · Updated

Follow this CVE+ Monitor External Links in New Window / New Tab

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.3%
The External Links in New Window / New Tab WordPress plugin before 1.43 does not ensure window.opener is set to "null" when links to external sites are clicked, which may enable tabnabbing attacks to occur.
Affected products
Unknown · External Links in New Window / New Tab
Related CVEs — External Links in New Window / New Tab

In the same product, most dangerous first.

CVE-2022-1582—External Links in New Window / New Tab < 1.43 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.8%