Real3D Flipbook – 3D FlipBook, PDF FlipBook, PDF Viewer, PDF Embedder

Уязвимости

• CVE-2024-9849автор+≤ 4.8

  Real3D Flipbook Lite – 3D FlipBook, PDF Viewer, PDF Embedder <= 4.8 - Authenticated (Author+) Arbitrary File Upload

  Высокий 8.8

• CVE-2016-10966без авторизации

  The real3d-flipbook-lite plugin 1.0 for WordPress has bookName=../ directory traversal for file upload.

  Высокий 7.5

• CVE-2016-10965без авторизации

  The real3d-flipbook-lite plugin 1.0 for WordPress has deleteBook=../ directory traversal for file deletion.

  Высокий 7.5

• CVE-2024-32694без авторизации · нужен клик≤ 3.62

  WordPress 3D FlipBook, PDF Viewer, PDF Embedder plugin <= 3.62 - Reflected Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2025-68512нужен вход≤ 4.11.4

  WordPress Real 3D FlipBook plugin <= 4.11.4 - Cross Site Scripting (XSS) vulnerability

  Средний 6.5

• CVE-2026-15098участник+≤ 5.1.1

  Real 3D Flipbook <= 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lightboxtext' Shortcode Attribute

  Средний 6.4

• CVE-2016-10967без авторизации · нужен клик

  The real3d-flipbook-lite plugin 1.0 for WordPress has XSS via the wp-content/plugins/real3d-flipbook/includes/flipbooks.php bookId parameter

  Средний 6.1

• CVE-2024-34561высокие права≤ 3.71

  WordPress Real3D Flipbook PDF Viewer Lite plugin <= 3.71 - Cross Site Scripting (XSS) vulnerability

  Средний 5.9

• CVE-2026-25423высокие права≤ 4.19.1

  WordPress Real 3D FlipBook plugin <= 4.19.1 - Broken Access Control vulnerability

  Низкий 3.8