CVE-2010-4403

Published: Dec 6, 2010Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Register Plus plugin 3.5.1 and earlier for WordPress allows remote attackers to obtain sensitive information via a direct request to (1) dash_widget.php and (2) register-plus.php, which reveals the installation path in an error message.

Affected (22)

Products: Devbits: Register Plus

Devbits

1 product

Configuration A

22 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Devbits Register Plus	Up to 3.5.1
Devbits Register Plus	Version 1.1
Devbits Register Plus	Version 1.2
Devbits Register Plus	Version 2.0
Devbits Register Plus	Version 2.1
Devbits Register Plus	Version 2.2
Devbits Register Plus	Version 2.3
Devbits Register Plus	Version 2.4
Devbits Register Plus	Version 2.5
Devbits Register Plus	Version 2.6
Devbits Register Plus	Version 2.7
Devbits Register Plus	Version 2.8
Devbits Register Plus	Version 2.9
Devbits Register Plus	Version 3.0.1
Devbits Register Plus	Version 3.0.2
Devbits Register Plus	Version 3.0
Devbits Register Plus	Version 3.1
Devbits Register Plus	Version 3.2
Devbits Register Plus	Version 3.3
Devbits Register Plus	Version 3.4.1
Devbits Register Plus	Version 3.4
Devbits Register Plus	Version 3.5