| Package | Affected versions | Patched versions |
|---|---|---|
| auto-hyperlink urls | ≤ 5.4.1 |
The Auto-hyperlink URLs WordPress plugin through 5.4.1 does not set rel="noopener noreferer" on generated links, which can lead to Tab Nabbing by giving the target site access to the source tab through the window.opener DOM object.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free