CVE-2012-6652
9.8
CRITICAL · CVSS 3.0 · EPSS 4.4% (pctl 91)
In your normal cycle
Critical by CVSS (9.8), but no sign of active exploitation.
Description
Directory traversal vulnerability in pageflipbook.php script from index.php in Page Flip Book plugin for WordPress (wppageflip) allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the pageflipbook_language parameter.
Scoring
| CVSS | 9.8 (CRITICAL, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 4.42% — more likely to be exploited than 91% of all CVEs |
| Weakness | CWE-22 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2019-05-13 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| page flip book project | page flip book |
References
- http://ceriksen.com/2012/07/10/wordpress-a-page-flip-book-plugin-local-file-inclusion-vulnerability/
- https://wordpress.org/support/topic/pageflipbook-pageflipbook_language-parameter-local-file-inclusion/
- https://www.openwall.com/lists/oss-security/2014/07/30/2
- https://www.openwall.com/lists/oss-security/2014/07/31/8
- http://ceriksen.com/2012/07/10/wordpress-a-page-flip-book-plugin-local-file-inclusion-vulnerability/
- https://wordpress.org/support/topic/pageflipbook-pageflipbook_language-parameter-local-file-inclusion/
- https://www.openwall.com/lists/oss-security/2014/07/30/2
- https://www.openwall.com/lists/oss-security/2014/07/31/8
→ the Explorer · watch your stack · NVD