WordPress Plugin Vulnerabilities

Register Plus <= 3.5.1 - Multiple XSS

Description

It is unclear whether or not the issue has been fixed. Plugin has been closed

Affects Plugins

Plugin icon
register-plus
No known fix

References

CVE
CVE-2010-4402
URL
https://packetstormsecurity.com/files/#96143/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
6a3cdfb7-853d-4570-9176-a32e75a8bbaa

Timeline

Publicly Published
2010-11-25 (about 15 years ago)
Added
2019-08-23 (about 6 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2025-01-07
Title
TRUSTist REVIEWer <= 2.0 - Reflected Cross-Site Scripting
Published
2025-10-17
Title
Related Posts Lite <= 1.12 - Authenticated (Admin+) Stored Cross-Site Scripting
Published
2021-08-30
Title
Easy Social Icons < 3.0.9 - Reflected Cross-Site Scripting
Published
2025-08-19
Title
Markup Markdown < 3.20.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2026-04-03
Title
Xpro Addons — 140+ Widgets for Elementor < 1.4.21 - Authenticated (Contributor+) Stored Cross-Site Scripting