WordPress security by component

Dark Mode

Plugin description

Dark Mode is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Jan 13, 2018; the highest CVE/CNA score is 4.8.

Plugin slug: dark-mode

Latest vulnerability

CVE-2018-5652: Dark Mode: Cross-site scripting

Dark Mode is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedJan 13, 2018

Safe version guidanceSee mitigation notes

		Safe version
Jan 13, 2018	CVE-2018-5652 Dark Mode: Cross-site scripting Dark Mode is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE4.8 NVD4.8
Jan 13, 2018	CVE-2018-5651 Dark Mode: Cross-site scripting Dark Mode is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE4.8 NVD4.8