Unrated severityNVD Advisory· Published Jul 11, 2014· Updated Jun 17, 2026

CVE-2014-4937

Description

Directory traversal vulnerability in includes/bookx_export.php BookX plugin 1.7 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Bookx Plugin Project/Bookx
cpe:2.3:a:bookx_plugin_project:bookx:1.7:*:*:*:*:wordpress:*:*
WordPress/BookXllm-create
Range: = 1.7

Patches

Vulnerability mechanics

References

codevigilant.com/disclosure/wp-plugin-bookx-local-file-inclusion/nvdExploit

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.007
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000