CVE-2022-2354: Wp-Dbmanager Project Wp-Dbmanager

High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days.

The WP-DBManager WordPress plugin before 2.80.8 does not prevent administrators from running arbitrary commands on the server in multisite installations, where only super-administrators should.

Affected products

• Wp-Dbmanager Project Wp-Dbmanager: before 2.80.8 (fixed in 2.80.8)

Published 2022-08-15. Last modified 2026-06-17.