CVE-2018-5652

An issue was discovered in the dark-mode plugin 1.6 for WordPress. XSS exists via the wp-admin/profile.php dark_mode_end parameter.

• CWE-79

• https://github.com/d4wner/Vulnerabilities-Report/blob/master/dark-mode.mdExploit, Issue Tracking, Third Party Advisory
• https://wpvulndb.com/vulnerabilities/9008Third Party Advisory
• https://github.com/d4wner/Vulnerabilities-Report/blob/master/dark-mode.mdExploit, Issue Tracking, Third Party Advisory
• https://wpvulndb.com/vulnerabilities/9008Third Party Advisory

Published

Jan 13, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5553The Crestron Console service running on DGE-100, DM-DGE-200-…9.8
• CVE-2018-5559In Rapid7 Komand version 0.41.0 and prior, certain endpoints…3.4
• CVE-2018-5560A reliance on a static, hard-coded credential in the design …10
• CVE-2018-558213Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-5650In Long Range Zip (aka lrzip) 0.631, there is an infinite lo…
• CVE-2018-5651An issue was discovered in the dark-mode plugin 1.6 for Word…
• CVE-2018-5653An issue was discovered in the weblizar-pinterest-feeds plug…
• CVE-2018-5654An issue was discovered in the weblizar-pinterest-feeds plug…
• CVE-2018-5655An issue was discovered in the weblizar-pinterest-feeds plug…
• CVE-2018-5656An issue was discovered in the weblizar-pinterest-feeds plug…
• CVE-2018-5657An issue was discovered in the responsive-coming-soon-page p…
• CVE-2018-5658An issue was discovered in the responsive-coming-soon-page p…