Register Plus

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:devbits:register-plus:3.4.1:*:*:*:*:*:*:*

part: a version: 3.4.1 update: *

VendorDevbits (7608dc76-f8c7-511f-9d16-f9dbe7d43df7)
ProductRegister Plus (f84eb5ab-d40c-5767-83b9-7220d8a91567)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-4403 vulnerable 2026-06-08 04:56:27.672983 Details available
The Register Plus plugin 3.5.1 and earlier for WordPress allows remote attackers to obtain sensitive information via a direct request to (1) dash_widget.php and (2) register-plus.php, which reveals the installation path in an error message.
Published: 2010-12-04T23:00:00.000Z
Updated: 2024-08-07T03:43:14.911Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4402 vulnerable 2026-06-08 04:56:27.670233 Details available
Multiple cross-site scripting (XSS) vulnerabilities in wp-login.php in the Register Plus plugin 3.5.1 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) firstname, (2) lastname, (3) website, (4) aim, (5) yahoo, (6) jabber, (7) about, (8) pass1, and (9) pass2 parameters in a register action.
Published: 2010-12-04T23:00:00.000Z
Updated: 2024-08-07T03:43:14.597Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.