CVE-2012-5469

The Portable phpMyAdmin plugin for WordPress (versions before 1.3.1 ) is vulnerable to an authentication bypass because the /wp-pma-mod/ path fails to verify an existing WordPress session or permissions. Remote attackers can gain full access to the phpMyAdmin console by making a direct request to...