System	Score	Found at
epss	0.03364	https://api.first.org/data/v1/epss?cve=CVE-2018-20147
epss	0.03364	https://api.first.org/data/v1/epss?cve=CVE-2018-20147
epss	0.03364	https://api.first.org/data/v1/epss?cve=CVE-2018-20147
epss	0.0518	https://api.first.org/data/v1/epss?cve=CVE-2018-20147
epss	0.0518	https://api.first.org/data/v1/epss?cve=CVE-2018-20147
epss	0.0518	https://api.first.org/data/v1/epss?cve=CVE-2018-20147
epss	0.0518	https://api.first.org/data/v1/epss?cve=CVE-2018-20147
epss	0.0518	https://api.first.org/data/v1/epss?cve=CVE-2018-20147
epss	0.0518	https://api.first.org/data/v1/epss?cve=CVE-2018-20147
epss	0.0518	https://api.first.org/data/v1/epss?cve=CVE-2018-20147
epss	0.0518	https://api.first.org/data/v1/epss?cve=CVE-2018-20147
epss	0.0518	https://api.first.org/data/v1/epss?cve=CVE-2018-20147
epss	0.0518	https://api.first.org/data/v1/epss?cve=CVE-2018-20147
cvssv2	5.5	https://nvd.nist.gov/vuln/detail/CVE-2018-20147
cvssv3	6.5	https://nvd.nist.gov/vuln/detail/CVE-2018-20147

Reference id	Reference type	URL
		https://api.first.org/data/v1/epss?cve=CVE-2018-20147
		https://codex.wordpress.org/Version_4.9.9
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20147
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20148
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20149
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20150
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20151
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20152
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20153
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8942
		https://lists.debian.org/debian-lts-announce/2019/02/msg00019.html
		https://wordpress.org/news/2018/12/wordpress-5-0-1-security-release/
		https://wordpress.org/support/wordpress-version/version-5-0-1/
		https://wpvulndb.com/vulnerabilities/9169
		https://www.debian.org/security/2019/dsa-4401
		https://www.zdnet.com/article/wordpress-plugs-bug-that-led-to-google-indexing-some-user-passwords/
		http://www.securityfocus.com/bid/106220
916403		https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916403
cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
CVE-2018-20147		https://nvd.nist.gov/vuln/detail/CVE-2018-20147

No exploits are available.

Vector: AV:N/AC:L/Au:S/C:N/I:P/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2018-20147

Exploitability (E)	Access Vector (AV)	Access Complexity (AC)	Authentication (Au)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
high functional unproven proof_of_concept not_defined	local adjacent_network network	high medium low	multiple single none	none partial complete	none partial complete	none partial complete

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2018-20147

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Percentile	0.86975
EPSS Score	0.03364
Published At	Aug. 1, 2025, 12:55 p.m.

Date	Actor	Action	Source	VulnerableCode Version
2025-07-31T09:59:31.392301+00:00	NVD Importer	Import	https://nvd.nist.gov/vuln/detail/CVE-2018-20147	37.0.0