WordPress Database Manager plugin version 2.7.1 suffers from remote command injection and credential leakage vulnerabilities.