CVE-2022-1583

The External Links in New Window / New Tab WordPress plugin before 1.43 does not ensure window.opener is set to "null" when links to external sites are clicked, which may enable tabnabbing attacks to occur.

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS

1.32% chance of exploitation in the next 30 days, 69th percentile

Published

2022-05-30

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/aa9d727c-4d17-4220-b8cb-e6dec30361a9

References

• CVE Record
• NVD entry

Related

• CVE-2022-1582
• CVE-2022-1584
• CVE-2022-1581
• CVE-2022-1585
• CVE-2022-1580
• CVE-2022-1589