Description
For a client program to be able to connect to the MySQL server, it must use the proper connection parameters, such as the name of the host where the server is running and the user name and password of your MySQL account.
When the connection to the database cannot be established, the server returns an error message including the MySQL username and host that were used. This information should not be present on a production system.
Remediation
Make sure the MySQL connection can be established and configure PHP not to display error messages.
References
Related Vulnerabilities
WordPress Plugin Welcart e-Commerce Information Disclosure (2.2.7)
WordPress Plugin MAC PHOTO GALLERY Arbitrary File Download (3.0)
WordPress Plugin Simple Download Button Shortcode 'file' Parameter Information Disclosure (1.0)
WordPress Plugin CP Image Store with Slideshow Arbitrary File Download (1.0.5)
WordPress Plugin Advanced Woo Search Information Disclosure (1.99)