System	Score	Found at
epss	0.07569	https://api.first.org/data/v1/epss?cve=CVE-2018-20152
epss	0.07569	https://api.first.org/data/v1/epss?cve=CVE-2018-20152
epss	0.07569	https://api.first.org/data/v1/epss?cve=CVE-2018-20152
epss	0.10537	https://api.first.org/data/v1/epss?cve=CVE-2018-20152
epss	0.10537	https://api.first.org/data/v1/epss?cve=CVE-2018-20152
epss	0.10537	https://api.first.org/data/v1/epss?cve=CVE-2018-20152
epss	0.10537	https://api.first.org/data/v1/epss?cve=CVE-2018-20152
epss	0.10537	https://api.first.org/data/v1/epss?cve=CVE-2018-20152
epss	0.10537	https://api.first.org/data/v1/epss?cve=CVE-2018-20152
epss	0.10537	https://api.first.org/data/v1/epss?cve=CVE-2018-20152
epss	0.10537	https://api.first.org/data/v1/epss?cve=CVE-2018-20152
epss	0.10537	https://api.first.org/data/v1/epss?cve=CVE-2018-20152
epss	0.10537	https://api.first.org/data/v1/epss?cve=CVE-2018-20152
epss	0.10537	https://api.first.org/data/v1/epss?cve=CVE-2018-20152
cvssv2	4.0	https://nvd.nist.gov/vuln/detail/CVE-2018-20152
cvssv3	6.5	https://nvd.nist.gov/vuln/detail/CVE-2018-20152

Reference id	Reference type	URL
		https://api.first.org/data/v1/epss?cve=CVE-2018-20152
		https://codex.wordpress.org/Version_4.9.9
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20147
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20148
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20149
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20150
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20151
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20152
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20153
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8942
		https://lists.debian.org/debian-lts-announce/2019/02/msg00019.html
		https://wordpress.org/news/2018/12/wordpress-5-0-1-security-release/
		https://wordpress.org/support/wordpress-version/version-5-0-1/
		https://wpvulndb.com/vulnerabilities/9170
		https://www.debian.org/security/2019/dsa-4401
		https://www.zdnet.com/article/wordpress-plugs-bug-that-led-to-google-indexing-some-user-passwords/
		http://www.securityfocus.com/bid/106220
916403		https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916403
cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
CVE-2018-20152		https://nvd.nist.gov/vuln/detail/CVE-2018-20152

No exploits are available.

Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2018-20152

Exploitability (E)	Access Vector (AV)	Access Complexity (AC)	Authentication (Au)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
high functional unproven proof_of_concept not_defined	local adjacent_network network	high medium low	multiple single none	none partial complete	none partial complete	none partial complete

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2018-20152

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Percentile	0.915
EPSS Score	0.07569
Published At	Aug. 1, 2025, 12:55 p.m.

Date	Actor	Action	Source	VulnerableCode Version
2025-07-31T09:59:31.565254+00:00	NVD Importer	Import	https://nvd.nist.gov/vuln/detail/CVE-2018-20152	37.0.0