Vitamin < 1.1.0 - Directory Traversal
highMultiple directory traversal vulnerabilities in the Vitamin plugin before 1.1.0 for WordPress allow remote attackers to access arbitrary files via a .. (dot dot) in the path parameter to (1) add_headers.php or (2) minify.php.
- CVSS:
- 7.5
- Affected:
- up to 1.1.0
- Fixed in:
- 1.1.0
- Disclosed:
- Aug 7, 2012