Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Wp-dbmanager Project Clear all filters
TI-2022-02173 CVE-2022-2354 · GHSA-65pv-gqpg-397f

WP-DBManager < 2.80.8 - Admin+ Remote Command Execution

Priority LOW 34

The WP-DBManager WordPress plugin before 2.80.8 does not prevent administrators from running arbitrary commands on the server in multisite installations, where only super-administrators should.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01276 Published 2022-08-15 Fixed in 2.80.8 CWE-863
TI-2014-06855 CVE-2014-8336 · GHSA-x6xg-r8xf-pr9p

The "Sql Run Query" panel in WP-DBManager (aka Database Manager) plugin before 2.7.2 for…

Priority LOW 34

The "Sql Run Query" panel in WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress allows remote attackers to read arbitrary files by leveraging failure to sufficiently limit queries, as demonstrated by u…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02597 Published 2018-01-05 No fix listed CWE-20
TI-2014-06854 CVE-2014-8335 · GHSA-xhgm-q8m9-9c6v

(1) wp-dbmanager.php and (2) database-manage.php in the WP-DBManager (aka Database…

Priority LOW 35

(1) wp-dbmanager.php and (2) database-manage.php in the WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress place credentials on the mysqldump command line, which allows local users to obtain sensitive…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00529 Published 2018-01-05 No fix listed CWE-255
TI-2014-06853 CVE-2014-8334 · GHSA-8wwf-w8hv-8982

The WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress allows remote…

Priority LOW 35

The WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) $backup['filepath'] (aka "Path to Backup:" fie…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.03471 Published 2014-10-31 No fix listed CWE-78