WordPress Plugin Vulnerabilities

Download WP-DBManager <= 2.79.1 - Arbitrary File Delete

Description

The WP-DBManager WordPress plugin was affected by an Arbitrary File Delete security vulnerability.

Affects Plugins

Plugin icon
wp-dbmanager
Fixed in 2.79.2

References

URL
https://plugins.trac.wordpress.org/changeset/1960351/wp-dbmanager

Miscellaneous

Original Researcher
RIPS Technologies
Submitter
Ryan Dewhurst
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
2817b75f-d75e-4166-83dc-29ffb5deecf7

Timeline

Publicly Published
2018-10-22 (about 7 years ago)
Added
2018-11-22 (about 7 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2014-08-01
Title
Persuasion <= 2.4 - dl-skin.php _mysite_delete_skin_zip Parameter Absolute Path Traversal Remote Directory Deletion
Published
2025-10-15
Title
Felan Framework < 1.1.5 - Hardcoded Credentials
Published
2014-08-01
Title
WP Property < 1.38.4 - Non-administrative User XMLI Remote Information Disclosure
Published
2014-08-01
Title
DejaVu 2.4 - dl-skin.php _mysite_download_skin Parameter Absolute Path Traversal Remote File Download
Published
2015-01-28
Title
RedSteel Theme - File Disclosure