devbits register-plus vulnerabilities

Latest devbits register-plus CVEs

Newest publication first

1. CVE-2010-4403 Register Plus <= 3.5.11 - Sensitive Information Disclosure

   Published 2010-12-06

   Medium·CVSS 5.0

   The Register Plus plugin 3.5.1 and earlier for WordPress allows remote attackers to obtain sensitive information via a direct request to (1) dash_widget.php and (2) register-plus.php, which reveals the installation path in an error message.

2. CVE-2010-4402 Register Plus <= 3.5.11 - Stored Cross-Site Scripting

   Published 2010-12-06

   Medium·CVSS 4.3

   Multiple cross-site scripting (XSS) vulnerabilities in wp-login.php in the Register Plus plugin 3.5.1 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) firstname, (2) lastname, (3) website, (4) aim, (5) yahoo, (6) jabber, (7) abou...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.