WordPress DBManager Plugin <= 2.7.1 - Multiple Vulnerabilities

There are multiple vulnerabilities in this plugin, that allow remote authenticated users to execute arbitrary commands via shell metacharacters in the $backup[‘filepath’] or $backup[‘mysqldumppath’] variable.

Solution

           Update the plugin.