blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2022-1583

MEDIUM 6.5 CVSS 3.1
Published
May 30, 2022
Last modified
June 17, 2026
NVD status
Modified
Reported by
contact@wpscan.com
Weakness
CWE-1022
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Description

The External Links in New Window / New Tab WordPress plugin before 1.43 does not ensure window.opener is set to "null" when links to external sites are clicked, which may enable tabnabbing attacks to occur.

Affected WordPress components

  • External Links in New Window / New Tab Plugin · open-external-links-in-a-new-window
    Possible match Active
    From 1.43 (including) to 1.43 (excluding)
    View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

  • Unknown External Links in New Window / New Tab — From 1.43 (including) to 1.43 (excluding)
  • webfactoryltd external_links_in_new_window_\/_new_tab — Before 1.43

References

  • wpscan.com https://wpscan.com/vulnerability/aa9d727c-4d17-4220-b8cb-e6dec30361a9 Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record