CVE-2014-4937

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2014-07-11 · updated 2026-06-17
Weakness: CWE-22

Description

Directory traversal vulnerability in includes/bookx_export.php BookX plugin 1.7 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

Affected products

Bookx Plugin Project Bookx: 1.7

References

http://codevigilant.com/disclosure/wp-plugin-bookx-local-file-inclusion/
http://codevigilant.com/disclosure/wp-plugin-bookx-local-file-inclusion/

Get alerted when CVE-2014-4937 or the next vulnerability affects your stack