What’s Vulnerable › Vulnerabilities
CVE-2018-20555
- Severity: critical (CVSS 9.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 10.4% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2019-03-21 · updated 2026-06-17
- Weakness: CWE-200
Description
The Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote attackers to discover Twitter access_token, access_token_secret, consumer_key, and consumer_secret values by reading the dcwp_twitter.php source code. This leads to Twitter account takeover.
Affected products
References
- https://github.com/fs0c131y/CVE-2018-20555
- https://twitter.com/fs0c131y/status/1085828186708066304
- https://wpvulndb.com/vulnerabilities/9204
- https://github.com/fs0c131y/CVE-2018-20555
- https://twitter.com/fs0c131y/status/1085828186708066304
- https://wpvulndb.com/vulnerabilities/9204
Get alerted when CVE-2018-20555 or the next vulnerability affects your stack