Skip to content
Not rated

CVE-2022-2354 The WP-DBManager WordPress plugin before 2.80.8 does not prevent administrators from running arbitrary commands on the…

Description

The WP-DBManager WordPress plugin before 2.80.8 does not prevent administrators from running arbitrary commands on the server in multisite installations, where only super-administrators should.

Affected products and versions

Product Affected versions Fixed in
WP-DBManager 2.80 earliest → < 2.80.8 2.80.8
Track this CVE