Vulnerabilities

TI-2016-09005 CVE-2016-10967 · GHSA-6pf2-f62r-mjc2

The real3d-flipbook-lite plugin 1.0 for WordPress has XSS via the…

LOW 29

The real3d-flipbook-lite plugin 1.0 for WordPress has XSS via the wp-content/plugins/real3d-flipbook/includes/flipbooks.php bookId parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0102 Published 2019-09-16 No fix listed CWE-79

TI-2016-09004 CVE-2016-10966 · GHSA-8v9g-2g58-xrq7

LOW 38

The real3d-flipbook-lite plugin 1.0 for WordPress has bookName=../ directory traversal for file upload.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02633 Published 2019-09-16 No fix listed CWE-22

TI-2016-09003 CVE-2016-10965 · GHSA-mvwh-3cwq-f7hc

LOW 37

The real3d-flipbook-lite plugin 1.0 for WordPress has deleteBook=../ directory traversal for file deletion.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02214 Published 2019-09-16 No fix listed CWE-22