WordPress Plugin Vulnerabilities
Social Network Tabs - Social Media API Key Leakage
Description
According to the original researcher:
"The Wordpress Plugin called Social Network Tabs, made by the company Design Chemical, is leaking twice the Twitter access_token, access_token_secret, consumer_key and consumer_secret of their user which is leading to a takeover of their Twitter account."
Affects Plugins
No known fix References
Miscellaneous
Original Researcher
@fs0c131y
Submitter
Ryan Dewhurst
Submitter twitter
Verified
No
WPVDB ID
Timeline
Publicly Published
2019-01-16 (about 7 years ago)
Added
2019-01-17 (about 7 years ago)
Last Updated
2020-09-22 (about 5 years ago)
WPScan 