CVE-2022-47160 - CVE House
Back to Database
Status published Medium CVE-2022-47160

WordPress Wp Social Plugin <= 1.9.0 is vulnerable to Sensitive Data Exposure

Vulnerability Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wpmet Wp Social Login and Register Social Counter.This issue affects Wp Social Login and Register Social Counter: from n/a through 1.9.0.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-47160

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Dave Jong (Patchstack)

References

More from Wpmet

View All →
CVE-2024-34758
WordPress FundEngine – Donation and Crowdfunding Platform plugin <= 1.6.4 - Broken Access Control vulnerability
Medium 5.3
CVE-2024-32685
WordPress WP Ultimate Review plugin <= 2.2.5 - Review Score Manipulation vulnerability
Medium 5.3
CVE-2024-32684
WordPress WP Ultimate Review plugin <= 2.2.5 - Broken Access Control on Review vulnerability
Medium 5.3
CVE-2024-32683
WordPress WP Ultimate Review plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability
Medium 5.3
CVE-2023-46085
WordPress Wp Ultimate Review Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)
Medium 4.3

Affected Vendor

Affected Software

Wp Social Login and Register Social Counter
Vulnerable Versions:
Unknown

Timeline

Official Publish: January 19th, 2024
Last Modified: April 28th, 2026
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-200

MITRE ATT&CK TTPs

T1213 Data from Information Repositories
Collection
T1005 Data from Local System
Collection
T1552 Unsecured Credentials
Credential Access
T1041 Exfiltration Over C2 Channel
Exfiltration