CVE-2018-20555: Designchemical Social Network Tabs

Critical severity, CVSS 9.8. EPSS: 10.4% chance of exploitation in the next 30 days.

The Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote attackers to discover Twitter access_token, access_token_secret, consumer_key, and consumer_secret values by reading the dcwp_twitter.php source code. This leads to Twitter account takeover.

Affected products

• Designchemical Social Network Tabs: version 1.7.1 only

Published 2019-03-21. Last modified 2026-06-17.