Medium severity · published Jan 19, 2024
CVE-2022-47160
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wpmet Wp Social Login and Register Social Counter.This issue affects Wp Social Login and Register…
6.5
CVSS
0.6%
EPSS
No
On KEV
Description
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wpmet Wp Social Login and Register Social Counter.This issue affects Wp Social Login and Register Social Counter: from n/a through 1.9.0.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 46% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WS
WP Social Login And Register Social Counter · Wpmet
before 2.0.0 · source: NVD
Affected product
WS
WP Social Login And Register Social Counter
Wpmet
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-47160
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-47160
Third Party Advisory
https://patchstack.com/database/vulnerability/wp-social/wordpress-wp-social-plugin-1-9-0-auth-sensitive-information-disclosure-vulnerability?_s_id=cve
More from WP Social Login And Register Social Counter
5.3
CVE-2024-1763
The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wp_social/v1/…
4.3
CVE-2025-1506
Wp Social Login and Register Social Counter <= 3.1.0 - Cross-Site Request Forgery to Settings Update