CVE-2018-5651: Dark Mode Project Dark Mode

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue was discovered in the dark-mode plugin 1.6 for WordPress. XSS exists via the wp-admin/profile.php dark_mode_start parameter.

Affected products

• Dark Mode Project Dark Mode: version 1.6 only

Published 2018-01-13. Last modified 2026-06-17.