CVE-2012-5469
The Portable phpMyAdmin plugin before 1.3.1 for WordPress allows remote attackers to bypass authentication and obtain phpMyAdmin console access via a direct request to wp-content/plugins/portable-phpmyadmin/wp-pma-mod.
Date published : 2012-12-20
http://archives.neohapsis.com/archives/bugtraq/2012-12/0092.html
http://wordpress.org/extend/plugins/portable-phpmyadmin/changelog/