WordPress Plugin BookX Local File Inclusion - CVE-2014-4937
WordPress Plugin BookX is prone to a local file inclusion vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin BookX version 1.7 is vulnerable prior versions may also be affected.