← WordPress Vulnerabilities
WordPress security by component

Real 3D FlipBook

Real 3D FlipBook is a WordPress component with 8 published CVE records in this archive. The latest tracked vulnerability was published Feb 19, 2026; the highest CVE/CNA score is 8.8.

Plugin slug: real3d-flipbook-lite

CVE-2026-25423: Real 3D FlipBook: A security weakness

Real 3D FlipBook is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedFeb 19, 2026
Safe version guidanceSee mitigation notes
Safe version
Feb 19, 2026 CVE-2026-25423
Real 3D FlipBook: A security weakness
Real 3D FlipBook is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE3.8
NVDPending
Dec 24, 2025 CVE-2025-68512
Real 3D FlipBook: Cross-site scripting
Real 3D FlipBook is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.5
NVDPending
Nov 16, 2024 CVE-2024-9849
Real3D Flipbook Lite – 3D FlipBook, PDF Viewer, PDF Embedder: Dangerous file upload
Real3D Flipbook Lite – 3D FlipBook, PDF Viewer, PDF Embedder is affected by dangerous file upload. Exploitation requires at least author-level access. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
See mitigation notes
CVE8.8
NVDPending
May 08, 2024 CVE-2024-34561
3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin: Cross-site scripting
3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE5.9
NVDPending
Apr 22, 2024 CVE-2024-32694
3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin: Cross-site scripting
3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE7.1
NVDPending
Sep 16, 2019 CVE-2016-10967
Real3D Flipbook Lite: Cross-site scripting
Real3D Flipbook Lite is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.1
NVD6.1
Sep 16, 2019 CVE-2016-10966
Real3D Flipbook Lite: Filesystem traversal
Real3D Flipbook Lite is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
See mitigation notes
CVE7.5
NVD7.5
Sep 16, 2019 CVE-2016-10965
Real3D Flipbook Lite: Filesystem traversal
Real3D Flipbook Lite is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
See mitigation notes
CVE7.5
NVD7.5