The Database Toolset plugin is vulnerable to arbitrary file deletion due to insufficient file path validation in a function in all versions up to, and including, 1.8.4. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).

OneIdentity - IAM and Cybersecurity Learning Hub

Welcome to the IAM and Cybersecurity Learning Hub, where we provide information about topics that work together to provide a unified identity security strategy, securing your users, data and applications from cyberattacks. We update this area regularly with new content, so be sure to check in regularly.