System	Score	Found at
epss	0.02233	https://api.first.org/data/v1/epss?cve=CVE-2018-20153
epss	0.02233	https://api.first.org/data/v1/epss?cve=CVE-2018-20153
epss	0.02233	https://api.first.org/data/v1/epss?cve=CVE-2018-20153
epss	0.04312	https://api.first.org/data/v1/epss?cve=CVE-2018-20153
epss	0.04312	https://api.first.org/data/v1/epss?cve=CVE-2018-20153
epss	0.04312	https://api.first.org/data/v1/epss?cve=CVE-2018-20153
epss	0.04312	https://api.first.org/data/v1/epss?cve=CVE-2018-20153
epss	0.04312	https://api.first.org/data/v1/epss?cve=CVE-2018-20153
epss	0.04312	https://api.first.org/data/v1/epss?cve=CVE-2018-20153
epss	0.04312	https://api.first.org/data/v1/epss?cve=CVE-2018-20153
epss	0.04312	https://api.first.org/data/v1/epss?cve=CVE-2018-20153
epss	0.04312	https://api.first.org/data/v1/epss?cve=CVE-2018-20153
epss	0.04312	https://api.first.org/data/v1/epss?cve=CVE-2018-20153
epss	0.04312	https://api.first.org/data/v1/epss?cve=CVE-2018-20153
epss	0.04312	https://api.first.org/data/v1/epss?cve=CVE-2018-20153
cvssv2	3.5	https://nvd.nist.gov/vuln/detail/CVE-2018-20153
cvssv3	5.4	https://nvd.nist.gov/vuln/detail/CVE-2018-20153

Reference id	Reference type	URL
		https://api.first.org/data/v1/epss?cve=CVE-2018-20153
		https://codex.wordpress.org/Version_4.9.9
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20147
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20148
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20149
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20150
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20151
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20152
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20153
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8942
		https://lists.debian.org/debian-lts-announce/2019/02/msg00019.html
		https://wordpress.org/news/2018/12/wordpress-5-0-1-security-release/
		https://wordpress.org/support/wordpress-version/version-5-0-1/
		https://wpvulndb.com/vulnerabilities/9172
		https://www.debian.org/security/2019/dsa-4401
		https://www.zdnet.com/article/wordpress-plugs-bug-that-led-to-google-indexing-some-user-passwords/
		http://www.securityfocus.com/bid/106220
916403		https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916403
cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
CVE-2018-20153		https://nvd.nist.gov/vuln/detail/CVE-2018-20153

No exploits are available.

Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2018-20153

Exploitability (E)	Access Vector (AV)	Access Complexity (AC)	Authentication (Au)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
high functional unproven proof_of_concept not_defined	local adjacent_network network	high medium low	multiple single none	none partial complete	none partial complete	none partial complete

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2018-20153

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Percentile	0.83953
EPSS Score	0.02233
Published At	Aug. 1, 2025, 12:55 p.m.

Date	Actor	Action	Source	VulnerableCode Version
2025-07-31T09:59:31.721635+00:00	NVD Importer	Import	https://nvd.nist.gov/vuln/detail/CVE-2018-20153	37.0.0