CVE-2008-5752: WordPress Page Flip Image Gallery Plugin

Medium severity, CVSS 4.3. EPSS: 5.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in getConfig.php in the Page Flip Image Gallery plugin 0.2.2 and earlier for WordPress, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the book_id parameter. NOTE: some of these details are obtained from third party information.

Affected products

• WordPress Page Flip Image Gallery Plugin: up to and including 0.2.2; version 0.1 only; version 0.1.1 only; version 0.1.3 only; version 0.1.4 only; version 0.1.6 only; …

Published 2008-12-30. Last modified 2026-06-16.