WordPress Plugin Vulnerabilities

Vitamin 1.0 - minify.php path Parameter Traversal Arbitrary File Access

Description

The vitamin WordPress plugin was affected by a minify.php path Parameter Traversal Arbitrary File Access security vulnerability.

Affects Plugins

Plugin icon
vitamin
Fixed in 1.1

References

CVE
CVE-2012-6651

Classification

Type
LFI
OWASP top 10
A1: Injection
CWE
CWE-22

Miscellaneous

Verified
No
WPVDB ID
889b9830-f3c0-4ff4-bb70-02c7237b6476

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-04-09
Title
WP-BusinessDirectory < 3.1.3 - Unauthenticated Arbitrary File Deletion
Published
2022-05-16
Title
Hover Effects < 2.1.1 - Admin+ LFI
Published
2021-06-09
Title
Motor theme < 3.1.0 - Unauthenticated Local File Inclusion
Published
2025-03-21
Title
Export and Import Users and Customers < 2.6.3 - Directory Traversal to Authenticated (Administrator+) Limited Arbitrary File Read via download_file Function
Published
2019-03-16
Title
GraceMedia Media Player 1.0 - Local File Inclusion (LFI)