WordPress Plugin Vulnerabilities

BookX 1.7 - includes/bookx_export.php file Parameter Remote Path Traversal File Access

Description

The bookx WordPress plugin was affected by an includes/bookx_export.php file Parameter Remote Path Traversal File Access security vulnerability.

Affects Plugins

Plugin icon
bookx
No known fix

References

CVE
CVE-2014-4937
URL
https://codevigilant.com/disclosure/wp-plugin-bookx-local-file-inclusion/

Classification

Type
LFI
OWASP top 10
A1: Injection
CWE
CWE-22

Miscellaneous

Verified
No
WPVDB ID
b992d6ea-e8f7-46c6-bf71-45d53c6b070a

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-10-03
Title
PixelYourSite < 11.1.2 - Admin+ LFI
Published
2025-11-18
Title
CSV to SortTable <= 4.2 - Contributor+ LFI
Published
2024-11-11
Title
WOLF < 1.0.8.4 - Authenticated (Editor+) CSV Path Traversal
Published
2024-09-23
Title
WooEvents < 4.1.3 - Unauthenticated Arbitrary File Overwrite
Published
2015-08-02
Title
simple-image-manipulator <= 1.0 - Remote File Download