System	Score	Found at
epss	0.04968	https://api.first.org/data/v1/epss?cve=CVE-2018-20150
epss	0.04968	https://api.first.org/data/v1/epss?cve=CVE-2018-20150
epss	0.04968	https://api.first.org/data/v1/epss?cve=CVE-2018-20150
epss	0.04968	https://api.first.org/data/v1/epss?cve=CVE-2018-20150
epss	0.04968	https://api.first.org/data/v1/epss?cve=CVE-2018-20150
epss	0.04968	https://api.first.org/data/v1/epss?cve=CVE-2018-20150
epss	0.04968	https://api.first.org/data/v1/epss?cve=CVE-2018-20150
epss	0.04968	https://api.first.org/data/v1/epss?cve=CVE-2018-20150
epss	0.04968	https://api.first.org/data/v1/epss?cve=CVE-2018-20150
epss	0.04968	https://api.first.org/data/v1/epss?cve=CVE-2018-20150
epss	0.04968	https://api.first.org/data/v1/epss?cve=CVE-2018-20150
epss	0.05065	https://api.first.org/data/v1/epss?cve=CVE-2018-20150
epss	0.05065	https://api.first.org/data/v1/epss?cve=CVE-2018-20150
cvssv2	4.3	https://nvd.nist.gov/vuln/detail/CVE-2018-20150
cvssv3	6.1	https://nvd.nist.gov/vuln/detail/CVE-2018-20150

Reference id	Reference type	URL
		https://api.first.org/data/v1/epss?cve=CVE-2018-20150
		https://codex.wordpress.org/Version_4.9.9
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20147
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20148
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20149
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20150
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20151
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20152
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20153
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8942
		https://github.com/WordPress/WordPress/commit/fb3c6ea0618fcb9a51d4f2c1940e9efcd4a2d460
		https://lists.debian.org/debian-lts-announce/2019/02/msg00019.html
		https://wordpress.org/news/2018/12/wordpress-5-0-1-security-release/
		https://wordpress.org/support/wordpress-version/version-5-0-1/
		https://wpvulndb.com/vulnerabilities/9173
		https://www.debian.org/security/2019/dsa-4401
		https://www.zdnet.com/article/wordpress-plugs-bug-that-led-to-google-indexing-some-user-passwords/
		http://www.securityfocus.com/bid/106220
916403		https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916403
cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
CVE-2018-20150		https://nvd.nist.gov/vuln/detail/CVE-2018-20150

No exploits are available.

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2018-20150

Exploitability (E)	Access Vector (AV)	Access Complexity (AC)	Authentication (Au)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
high functional unproven proof_of_concept not_defined	local adjacent_network network	high medium low	multiple single none	none partial complete	none partial complete	none partial complete

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2018-20150

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Percentile	0.89258
EPSS Score	0.04968
Published At	July 30, 2025, 12:55 p.m.

Date	Actor	Action	Source	VulnerableCode Version
2025-07-31T09:59:31.507487+00:00	NVD Importer	Import	https://nvd.nist.gov/vuln/detail/CVE-2018-20150	37.0.0