CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wpmet Wp Social Login and Register Social Counter.This issue affects Wp Social Login and Register Social Counter: from n/a through 1.9.0.
Explanation of Vulnerability in Simple Terms
WP Social Login and Register Social Counter versions up to 1.9.0 expose sensitive user information to authenticated attackers. An attacker with a low-privilege account can read data they should not have access to. The vulnerability does not allow modification or deletion of data, only unauthorized viewing. Update to a version newer than 1.9.0.
What an attacker can do
Read sensitive user information they should not have access to.
Potential impact on your site
User data may be exposed to any logged-in account, including subscriber-level users.
Conditions required to exploit
Attacker must have a low-privilege account on the site (e.g., subscriber or contributor).
Key dates
External resources
Related vulnerabilities
