Vulnerability Details CVE-2018-20555
The Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote attackers to discover Twitter access_token, access_token_secret, consumer_key, and consumer_secret values by reading the dcwp_twitter.php source code. This leads to Twitter account takeover.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.401
EPSS Ranking 97.2%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
Products affected by CVE-2018-20555
-
cpe:2.3:a:designchemical:social_network_tabs:1.7.1