Description
WordPress Plugin Adminer is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently authenticate/connect to the local/internal WordPress databases from the public internet. WordPress Plugin Adminer version 1.4.5 is vulnerable; prior versions may also be affected.
Remediation
Disable the plugin until a fix is available
References
https://sumofpwn.nl/advisory/2016/wordpress_adminer_plugin_allows_public__local__database_login.html
http://www.openwall.com/lists/oss-security/2017/03/01/5
https://packetstormsecurity.com/files/141423/WordPress-Adminer-1.4.4-Interface-Exposure.html
Related Vulnerabilities
Oracle JRE CVE-2013-5832 Vulnerability (CVE-2013-5832)
Oracle HTTP Server Other Vulnerability (CVE-2020-29506)
Oracle Application Server Other Vulnerability (CVE-2005-3448)
WordPress Plugin Maps Widget for Google Maps-Google Maps Builder Cross-Site Scripting (2.30)
WordPress Plugin Custom Add User Cross-Site Scripting (2.0.2)