Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Real3D Flipbook 5.4 Clear all filters
TI-2026-59374 CVE-2026-86842 · GHSA-c2cv-7vq9-6xf7

Real3D Flipbook Lite < 5.4 - Author+ Content Deletion and Stored XSS via Global Settings Overwrite

Priority LOW 32

The Real3D Flipbook WordPress plugin before 5.4 does not perform capability checks on several of its authenticated flipbook management actions, allowing users with Author-level access and above to delete other users' fli…

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00398 Published 2026-09-23 Fixed in 5.4 CWE-862
TI-2025-14313 CVE-2025-15696 · GHSA-jp4v-jf7w-hrh9

Real3D Flipbook Lite < 5.4 - Author+ Stored XSS

Priority LOW 32

The Real3D Flipbook WordPress plugin before 5.4 does not sanitize or escape several flipbook editor fields before rendering them back in the admin editor, allowing users with the Author role and above to inject arbitrary…

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00431 Published 2026-09-23 Fixed in 5.4 CWE-79