Is WP-DBManager safe?

Every recorded flaw

• Aug 15, 2022WP-DBManager: Does not prevent administrators from running arbitrary commands on the server in multisite installationsCVE-2022-2354 · fixed in 2.80.8 · reported by WPScan1.3% oddsHigh 7.2
• Jan 5, 2018The "Sql Run Query" panel in WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress allows remote attackers to read arbitrary files by leveragingCVE-2014-8336 · fixed in 2.7.2 · reported by MITRE2.6% oddsMedium 6.5
• Jan 5, 2018(1) wp-dbmanager.php and (2) database-manage.php in the WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress place credentials on the mysqldumpCVE-2014-8335 · fixed in 2.7.2 · reported by MITREHigh 7.8
• Oct 31, 2014The WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress allows remote authenticated users to execute arbitrary commands via shell metacharacteCVE-2014-8334 · fixed in 2.7.2 · reported by MITRE3.5% oddsMedium 6.5

Records come from the National Vulnerability Database, published by the researchers who found each flaw (Wordfence, Patchstack, WPScan and others); exploited status from CISA; exploit odds from FIRST’s EPSS; current version, installs and closures from wordpress.org, checked daily. Want every plugin on your site checked at once? Run the free website check.