CVSS 3.0
9.8 criticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2012-6652
Critical (9.8) in page flip book project page flip book. EPSS 4.4% chance of exploitation in the next 30 days.
Directory traversal vulnerability in pageflipbook.php script from index.php in Page Flip Book plugin for WordPress (wppageflip) allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pageflipbook_language parameter.
Severity
- EPSS
- 4.4% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- page_flip_book_project:page_flip_book
References
- http://ceriksen.com/2012/07/10/wordpress-a-page-flip-book-plugin-local-file-inclusion-vulnerability/
- https://wordpress.org/support/topic/pageflipbook-pageflipbook_language-parameter-local-file-inclusion/
- https://www.openwall.com/lists/oss-security/2014/07/30/2
- https://www.openwall.com/lists/oss-security/2014/07/31/8
- http://ceriksen.com/2012/07/10/wordpress-a-page-flip-book-plugin-local-file-inclusion-vulnerability/