CVE-2026-25423
- EPSS 0.04%
- Veröffentlicht 19.02.2026 08:27:07
- Zuletzt bearbeitet 19.02.2026 19:22:28
Missing Authorization vulnerability in creativeinteractivemedia Real 3D FlipBook real3d-flipbook-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Real 3D FlipBook: from n/a through <= 4.16.4.
CVE-2025-68512
- EPSS 0.04%
- Veröffentlicht 24.12.2025 12:31:21
- Zuletzt bearbeitet 20.01.2026 15:19:42
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in creativeinteractivemedia Real 3D FlipBook real3d-flipbook-lite allows Stored XSS.This issue affects Real 3D FlipBook: from n/a through <= 4.11.4.
CVE-2024-9849
- EPSS 12.22%
- Veröffentlicht 16.11.2024 04:15:07
- Zuletzt bearbeitet 18.11.2024 17:11:17
The 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'r3dfb_save_thumbnail_callback' function in all versions up to, and ...
CVE-2016-10967
- EPSS 0.19%
- Veröffentlicht 16.09.2019 13:15:11
- Zuletzt bearbeitet 21.11.2024 02:45:11
The real3d-flipbook-lite plugin 1.0 for WordPress has XSS via the wp-content/plugins/real3d-flipbook/includes/flipbooks.php bookId parameter.
CVE-2016-10965
- EPSS 0.52%
- Veröffentlicht 16.09.2019 13:15:10
- Zuletzt bearbeitet 21.11.2024 02:45:11
The real3d-flipbook-lite plugin 1.0 for WordPress has deleteBook=../ directory traversal for file deletion.
CVE-2016-10966
- EPSS 0.36%
- Veröffentlicht 16.09.2019 13:15:10
- Zuletzt bearbeitet 21.11.2024 02:45:11
The real3d-flipbook-lite plugin 1.0 for WordPress has bookName=../ directory traversal for file upload.