title: Auto-hyperlink URLs <= 5.4.1 - Tab Nabbing
description: The Auto-hyperlink URLs WordPress plugin through 5.4.1 does not set rel="noopener noreferer" on generated links, which can lead to Tab Nabbing by giving the target site access to the source tab through the window.opener DOM object.
problem types: CWE-1022 Use of Web Link to Untrusted Target with window.opener Access
affected:
{
product: Auto-hyperlink URLs
vendor: Unknown
versions:
lessThanOrEqual: 5.4.1, status: affected, version: 5.4.1, versionType: custom
}