WordPress plugin
Real3D Flipbook security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical2
- High1
- Medium3
- Low0
All Real3D Flipbook vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Critical9.1 | Directory Traversal ≤1.0.0No patch available | CVE-2016-10965 | |
| Medium6.1 | Reflected Cross-Site Scripting via bookId parameter <2.9Update to 2.9 | — | |
| High7.5 | File Upload to User Controlled Location ≤1.0.0No patch available | CVE-2016-10966 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤1.0.0No patch available | CVE-2016-10967 | |
| Critical10.0 | Unauthenticated Arbitrary File or Directory Delete <2.9Update to 2.9 | — | |
| Medium4.1 | Directory Traversal via Uploads <2.9Update to 2.9 | — |
- Critical9.1Directory Traversal
≤1.0.0No patch available
- Medium6.1Reflected Cross-Site Scripting via bookId parameter
<2.9Update to 2.9
- High7.5File Upload to User Controlled Location
≤1.0.0No patch available
- Medium6.1Reflected Cross-Site Scripting
≤1.0.0No patch available
- Critical10.0Unauthenticated Arbitrary File or Directory Delete
<2.9Update to 2.9
- Medium4.1Directory Traversal via Uploads
<2.9Update to 2.9
Real3D Flipbook: common questions
Does Real3D Flipbook have known vulnerabilities?
Yes. VulnCrest Radar lists 6 known vulnerabilities in Real3D Flipbook: 2 critical, 1 high, 3 medium. At least one is not fixed in the latest version.
How do I check which version of Real3D Flipbook I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Real3D Flipbook vulnerability?
CVE-2016-10965, published Jul 3, 2016: Real3D Flipbook <= 1.0.0 - Directory Traversal. Severity: Critical (CVSS 9.1).
Is any Real3D Flipbook vulnerability listed in CISA KEV?
No. None of the known Real3D Flipbook vulnerabilities is currently listed in the CISA KEV catalog.