(1) wp-dbmanager.php and (2) database-manage.php in the WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress place credentials on the mysqldump command line, which allows local users to obtain sensitive information by listing the process.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Wp-dbmanager | Wp-dbmanager_project | * | 2.7.1 (including) |