CVE-2022-2354
WP-DBManager < 2.80.8 - Admin+ Remote Command Execution
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.0%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
15 Aug 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The WP-DBManager WordPress plugin before 2.80.8 does not prevent administrators from running arbitrary commands on the server in multisite installations, where only super-administrators should.
Affected products
Unknown · WP-DBManagerWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →