VYPR

Auto-hyperlink URLs

by WordPress

CVEs (1)

  • CVE-2022-2600MedAug 22, 2022
    risk 0.35cvss 5.4epss 0.01

    The Auto-hyperlink URLs WordPress plugin through 5.4.1 does not set rel="noopener noreferer" on generated links, which can lead to Tab Nabbing by giving the target site access to the source tab through the window.opener DOM object.