Description

WordPress Plugin Social Network Tabs is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may help in launching further attacks. WordPress Plugin Social Network Tabs version 1.7.1 is vulnerable; prior versions may also be affected.

Remediation

Disable the plugin until a fix is available

References

https://github.com/fs0c131y/CVE-2018-20555

https://www.wordfence.com/blog/2019/01/using-commercial-plugins-responsibly/

Related Vulnerabilities

WordPress Plugin WP Maps-Display Google Maps Perfectly with Ease Multiple Cross-Site Scripting Vulnerabilities (2.3.9)

Dolphin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3728)

WordPress Plugin Neuvoo Jobs Cross-Site Scripting (2.0)

WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Cross-Site Scripting (2.2.2)

WordPress Plugin WP Simple Login Registration Cross-Site Scripting (1.0.2)

Severity

High

Classification

CVE-2018-20555 CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Tags

Missing Update Information Disclosure