Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

12 records

Vendor: creativeinteractivemedia Clear all filters
TI-2026-12711 CVE-2026-15098 · GHSA-4vrv-fq2h-vgq6

Cross-site scripting in creativeinteractivemedia Real3D Flipbook – 3D FlipBook, PDF…

Priority LOW 28

The Real3D Flipbook Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lightboxtext' shortcode attribute (and other unsanitized attributes handled by on_shortcode()) in versions up to, and in…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00331 Published 2026-09-19 No fix listed CWE-79
TI-2026-20539 CVE-2026-25423 · GHSA-gvqh-m2gv-282f

WordPress Real 3D FlipBook plugin <= 4.19.1 - Broken Access Control vulnerability

Priority LOW 18

Missing Authorization vulnerability in creativeinteractivemedia Real 3D FlipBook real3d-flipbook-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Real 3D FlipBook: from n/a…

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.00269 Published 2026-02-19 No fix listed CWE-862
TI-2025-42033 CVE-2025-68512 · GHSA-69qh-rjw9-c5r7

WordPress Real 3D FlipBook plugin <= 4.11.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in creativeinteractivemedia Real 3D FlipBook real3d-flipbook-lite allows Stored XSS.This issue affects Real 3D FlipBook:…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00169 Published 2025-12-24 No fix listed CWE-79
TI-2024-09140 CVE-2024-9849 · GHSA-fx7j-93q4-w74p

Real3D Flipbook Lite – 3D FlipBook, PDF Viewer, PDF Embedder <= 4.8 - Authenticated (Author+) Arbitrary File Upload

Priority MEDIUM 43

The Real3D Flipbook Lite – 3D FlipBook, PDF Viewer, PDF Embedder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'r3dfb_save_thumbnail_callback' function in all ver…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01224 Published 2024-11-16 No fix listed CWE-434
TI-2024-24730 CVE-2024-37215 · GHSA-662h-2c64-c76h

Cross-site scripting in creativeinteractivemedia Transition Slider – Responsive Image…

Priority LOW 26

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in creativeinteractivemedia Transition Slider – Responsive Image Slider and Gallery allows Stored XSS.This issue a…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00259 Published 2024-07-22 No fix listed CWE-79
TI-2024-22863 CVE-2024-34561 · GHSA-f5m7-q8r9-6vjc

WordPress Real3D Flipbook PDF Viewer Lite plugin <= 3.71 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Creative interactive media 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin allows Stored XSS…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00259 Published 2024-05-08 No fix listed CWE-79
TI-2024-21574 CVE-2024-32694 · GHSA-p2rg-m6w6-rqr4

WordPress 3D FlipBook, PDF Viewer, PDF Embedder plugin <= 3.62 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Creative interactive media 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin allows Reflected…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00371 Published 2024-04-22 No fix listed CWE-79