fs0c131y/CVE-2018-20555

fs0c131y/CVE-2018-20555

GitHubGitHub
GitHubgithub.com
twitter.comtwitter.com
Releases0
Stars73
Social Network Tabs Wordpress Plugin Vulnerability - CVE-2018-20555
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2018-20555↗
—7.5 HIGH

The Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote attackers to discover Twitter access_token, access_token_secret, consumer_key, and consumer_secret values by reading the dcwp_twitter.php source code. This leads to Twitter account takeover.