WP-DBManager, c4f629e11b2b4b566dd4cd877a7235b5f19b5953

CVE, Research URL: c4f629e11b2b4b566dd4cd877a7235b5f19b5953
Home page URL: Security reports for WP-DBManager
Application: WP-DBManager
Published on: Oct 22, 2018
Research Description: WP-DBManager [wp-dbmanager] < 2.79.2 WP-DBManager <= 2.79.1 - Directory Traversal Allowing Arbitrary File Deletion The WP-DBManager plugin for WordPress is vulnerable to Directory Traversal allowing arbitrary file deletion in versions up to, and including, 2.79.1. This allows authenticated high-privilege attackers to delete arbitrary files, which can be used to reset a site and gain administrative access.
Affected versions: max 2.79.2.
Status: vulnerable