Read the docs

Wp-dbmanager Project

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Wp-dbmanager Project records in CISA KEV

No Wp-dbmanager Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp-dbmanager 4 records LOW

Records

4 records

TI-2014-06854 CVE-2014-8335 · GHSA-xhgm-q8m9-9c6v

(1) wp-dbmanager.php and (2) database-manage.php in the WP-DBManager (aka Database…

Priority LOW 35

(1) wp-dbmanager.php and (2) database-manage.php in the WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress place credentials on the mysqldump command line, which allows local users to obtain sensitive…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00529 Published 2018-01-05 No fix listed CWE-255
TI-2014-06853 CVE-2014-8334 · GHSA-8wwf-w8hv-8982

The WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress allows remote…

Priority LOW 35

The WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) $backup['filepath'] (aka "Path to Backup:" fie…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03471 Published 2014-10-31 No fix listed CWE-78
TI-2022-02173 CVE-2022-2354 · GHSA-65pv-gqpg-397f

WP-DBManager < 2.80.8 - Admin+ Remote Command Execution

Priority LOW 34

The WP-DBManager WordPress plugin before 2.80.8 does not prevent administrators from running arbitrary commands on the server in multisite installations, where only super-administrators should.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01276 Published 2022-08-15 Fixed in 2.80.8 CWE-863
TI-2014-06855 CVE-2014-8336 · GHSA-x6xg-r8xf-pr9p

The "Sql Run Query" panel in WP-DBManager (aka Database Manager) plugin before 2.7.2 for…

Priority LOW 34

The "Sql Run Query" panel in WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress allows remote attackers to read arbitrary files by leveraging failure to sufficiently limit queries, as demonstrated by u…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02597 Published 2018-01-05 No fix listed CWE-20
Open these records in search →