Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority LOW 27

The Register Plus plugin 3.5.1 and earlier for WordPress allows remote attackers to obtain sensitive information via a direct request to (1) dash_widget.php and (2) register-plus.php, which reveals the installation path…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02329 Published 2010-12-04 No fix listed CWE-200
Priority LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in wp-login.php in the Register Plus plugin 3.5.1 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) firstname, (2) las…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02142 Published 2010-12-04 No fix listed CWE-79