CVE-2018-20463 is an arbitrary file read vulnerability affecting the JSmol2WP plugin version 1.07 for WordPress, stemming from a directory traversal flaw in the jsmol.php query string. This vulnerability, rated 7.5 HIGH on CVSS, allows unauthenticated attackers to read arbitrary files on the server and can also be leveraged for Server-Side Request Forgery (SSRF). While there is no evidence of active exploitation or KEV listing, Nuclei templates exist for detecting this high-severity vulnerability, though it has garnered minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.07CPE matchmatch criteria | cpe:2.3:a:jsmol2wp_project:jsmol2wp:1.07:*:*:*:*:wordpress:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.