CVE-2022-47160

The Wp Social Login and Register Social Counter plugin for WordPress through version 1.9.0 allows authenticated users with subscriber-level privileges to export sensitive user information including login credentials and passwords for connected social media accounts. The vulnerability exists because the export_users_content_csv function lacks proper capability checks, enabling low-privileged attackers to bypass authorization controls and access confidential data they should not be able to retrieve.

Based on public CVE data (MITRE/NVD).