Security Advisory

CVE-2018-20151

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-12-14 20:00:00

Last updated 2024-08-05 11:51:19

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

In WordPress before 4.9.9 and 5.x before 5.0.1, the user-activation page could be read by a search engine's web crawler if an unusual configuration were chosen. The search engine could then index and display a user's e-mail address and (rarely) the password that was generated by default.

← Browse all CVEs View on cve.org ↗