CVE-2018-1000512

Severity: medium (CVSS 6.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-06-26 · updated 2026-06-17
Weakness: CWE-79

Description

Tooltipy Tooltipy (tooltips for WP) version 5 contains a Cross Site Scripting (XSS) vulnerability in Glossary shortcode that can result in could allow anybody to do almost anything an admin can. This attack appear to be exploitable via Admin must follow a link. This vulnerability appears to have been fixed in 5.1.

Affected products

Tooltipy Project Tooltipy: 5.0

References

https://advisories.dxw.com/advisories/xss-in-tooltipy/
https://advisories.dxw.com/advisories/xss-in-tooltipy/

Get alerted when CVE-2018-1000512 or the next vulnerability affects your stack