Social Network Tabs - Social Media API Key Leakage <= 1.7.1 - Information Exposure
criticalThe Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote attackers to discover Twitter access_token, access_token_secret, consumer_key, and consumer_secret values by reading the dcwp_twitter.php source code. This leads to Twitter account takeover.
- CVSS:
- 9.8
- Affected:
- up to 1.7.1
- Fix:
- No patched version reported
- Disclosed:
- Jan 16, 2019