120万ダウンロードのWP-DBManagerプラグインに、3種の脆弱性

osvdbにて、120万ダウンロードのDBバックアッププラグイン、WP-DBManagerに脆弱性が報告されています。
バックアッププラグインとしてはかなり有名な方であり、日本語の記事も多数あります。

113507	2014-10-16	WP-DBManager Plugin for WordPress Sql Run Query Panel Query Handling System File Disclosure
WP-DBManager Plugin for WordPress contains a flaw in the Sql Run Query panel that is triggered when handling queries that contain the INSERT, UPDATE, REPLACE, DELETE, CREATE and ALTER statements. This may allow a remote attacker to gain access to system files.
113508	2014-10-16	WP-DBManager Plugin for WordPress passthru() Backup Handling Remote Command Execution
WP-DBManager Plugin for WordPress contains a flaw that is triggered when handling commands through passthru() when performing a backup. This may allow a remote attacker to execute arbitrary commands.
113509	2014-10-16	WP-DBManager Plugin for WordPress Process Table Local MySQL Credential Disclosure
WP-DBManager Plugin for WordPress contains a flaw that is triggered as credential information is exposed to the process table. this may allow a local attacker to gain access to MySQL credential information.