WordPress plugin
Real3D Flipbook – 3D FlipBook, PDF FlipBook, PDF Viewer, PDF Embedder security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High2
- Medium7
- Low0
All Real3D Flipbook – 3D FlipBook, PDF FlipBook, PDF Viewer, PDF Embedder vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤5.5No patch available | CVE-2026-39760 | |
| Medium4.3 | Missing Authorization ≤5.3Update to 5.4 | CVE-2026-86842 | |
| Medium6.4 | Authenticated (Author+) Stored Cross-Site Scripting ≤5.3Update to 5.4 | CVE-2025-15696 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via 'lightboxtext' Shortcode Attribute ≤5.1.1Update to 5.1.2 | CVE-2026-15098 | |
| Medium4.3 | Missing Authorization ≤4.19.1Update to 4.19.2 | CVE-2026-25423 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤4.11.4Update to 4.16.4 | CVE-2025-68512 | |
| High8.8 | Authenticated (Author+) Arbitrary File Upload ≤4.8Update to 4.8.5 | CVE-2024-9849 | |
| Medium6.4 | Authenticated (Author+) Stored Cross-Site Scripting ≤3.71Update to 3.72 | CVE-2024-34561 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤3.62Update to 3.63 | CVE-2024-32694 |
- High7.2Unauthenticated Stored Cross-Site Scripting
≤5.5No patch available
- Medium4.3Missing Authorization
≤5.3Update to 5.4
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
≤5.3Update to 5.4
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'lightboxtext' Shortcode Attribute
≤5.1.1Update to 5.1.2
- Medium4.3Missing Authorization
≤4.19.1Update to 4.19.2
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.11.4Update to 4.16.4
- High8.8Authenticated (Author+) Arbitrary File Upload
≤4.8Update to 4.8.5
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
≤3.71Update to 3.72
- Medium6.1Reflected Cross-Site Scripting
≤3.62Update to 3.63
Real3D Flipbook – 3D FlipBook, PDF FlipBook, PDF Viewer, PDF Embedder: common questions
Does Real3D Flipbook – 3D FlipBook, PDF FlipBook, PDF Viewer, PDF Embedder have known vulnerabilities?
Yes. VulnCrest Radar lists 9 known vulnerabilities in Real3D Flipbook – 3D FlipBook, PDF FlipBook, PDF Viewer, PDF Embedder: 2 high, 7 medium. At least one is not fixed in the latest version.
How do I check which version of Real3D Flipbook – 3D FlipBook, PDF FlipBook, PDF Viewer, PDF Embedder I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Real3D Flipbook – 3D FlipBook, PDF FlipBook, PDF Viewer, PDF Embedder vulnerability?
CVE-2026-39760, published Oct 5, 2026: Real3D Flipbook – 3D FlipBook, PDF FlipBook, PDF Viewer, PDF Embedder <= 5.5 - Unauthenticated Stored Cross-Site Scripting. Severity: High (CVSS 7.2).
Is any Real3D Flipbook – 3D FlipBook, PDF FlipBook, PDF Viewer, PDF Embedder vulnerability listed in CISA KEV?
No. None of the known Real3D Flipbook – 3D FlipBook, PDF FlipBook, PDF Viewer, PDF Embedder vulnerabilities is currently listed in the CISA KEV catalog.