CVE-2010-4403

MEDIUM 5.0 CVSS 2.0

Published: December 6, 2010
Last modified: June 16, 2026
NVD status: Modified
Reported by: cve@mitre.org
Weakness: CWE-200
CVSS vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

The Register Plus plugin 3.5.1 and earlier for WordPress allows remote attackers to obtain sensitive information via a direct request to (1) dash_widget.php and (2) register-plus.php, which reveals the installation path in an error message.

Affected products and versions

n/a n/a — Versions not specified

References

packetstormsecurity.org http://packetstormsecurity.org/files/view/96143/registerplus-xss.txt Exploit
websecurity.com.ua http://websecurity.com.ua/4539 Exploit
www.securityfocus.com http://www.securityfocus.com/archive/1/514903/100/0/threaded
nvd.nist.gov Official NVD record

WordPress CVEs

Description

Affected products and versions

References