Critical severity9.8NVD Advisory· Published Mar 21, 2019· Updated Jun 17, 2026

CVE-2018-20555

Description

The Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote attackers to discover Twitter access_token, access_token_secret, consumer_key, and consumer_secret values by reading the dcwp_twitter.php source code. This leads to Twitter account takeover.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Design Chemical Social Network Tabsinferred2 versions
=1.7.1+ 1 more
- (no CPE)range: =1.7.1
- (no CPE)range: <=1.7.1
Package: https://wordpress.org/plugins/design-chemical-social-network-tabs

Patches

Vulnerability mechanics

References

twitter.com/fs0c131y/status/1085828186708066304nvdExploitThird Party Advisory
wpvulndb.com/vulnerabilities/9204nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.008
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000