CVE-2013-4454

WordPress Portable phpMyAdmin Plugin 1.4.1 has Multiple Security Bypass Vulnerabilities

• CWE-287

• http://www.openwall.com/lists/oss-security/2013/10/22/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/10/22/9Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/10/23/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/10/23/9Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/63249Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/88184Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/88189Third Party Advisory, VDB Entry
• http://www.openwall.com/lists/oss-security/2013/10/22/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/10/22/9Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/10/23/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/10/23/9Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/63249Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/88184Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/88189Third Party Advisory, VDB Entry

Published

Feb 18, 2020

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-4448Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-4449The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does…
• CVE-2013-4450The HTTP server in Node.js 0.10.x before 0.10.21 and 0.8.x b…
• CVE-2013-4451gitolite commit fa06a34 through 3.5.3 might allow attackers …
• CVE-2013-4452Red Hat JBoss Operations Network 3.1.2 uses world-readable p…
• CVE-2013-4453Cross-site scripting (XSS) vulnerability in templates/login.…
• CVE-2013-4455Katello Installer before 0.0.18 uses world-readable permissi…
• CVE-2013-4456Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-4457The Cocaine gem 0.4.0 through 0.5.2 for Ruby allows context-…
• CVE-2013-4458Stack-based buffer overflow in the getaddrinfo function in s…
• CVE-2013-4459LightDM 1.7.5 through 1.8.3 and 1.9.x before 1.9.2 does not …
• CVE-2013-4460Cross-site scripting (XSS) vulnerability in account_sponsor_…