CVE-2018-20555

The Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote attackers to discover Twitter accesstoken, accesstokensecret, consumerkey, and consumersecret values by reading the dcwptwitter.php source code. This leads to Twitter account takeover...

CVE-2018-20555

The CVE-2018-20555 entry concerns the WordPress plugin Social Network Tabs (Design Chemical) , specifically versions around 1.7.1. The vulnerability is an information disclosure where remote attackers can read the file dcwp_twitter.php and obtain Twitter OAuth tokens and secrets (access_token, ac...

CVE-2018-20555

creationtimestamp| type| source ---|---|--- 2019-01-20 21:10:46+00:00| published-proof-of-concept| https://t.me/antichat/3350 2019-01-20 22:09:10+00:00| published-proof-of-concept| https://t.me/canyoupwnme/5025 2025-02-04 13:46:34+00:00| seen|...