CVE-2018-20555

State: Published
Severity: Not scored
Published: Mar 18, 2019
Updated: Aug 5, 2024
Reserved: Dec 28, 2018

Description

The Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote attackers to discover Twitter access_token, access_token_secret, consumer_key, and consumer_secret values by reading the dcwp_twitter.php source code. This leads to Twitter account takeover.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://wpvulndb.com/vulnerabilities/9204
https://twitter.com/fs0c131y/status/1085828186708066304
https://github.com/fs0c131y/CVE-2018-20555

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.