High · 7.1 CVE-2026-39760 EUVD-2026-92955GHSA-3m56-84rh-9vhm

WordPress Real 3D FlipBook plugin <= 5.5 - Cross Site Scripting (XSS) vulnerability

Published Oct 6, 2026 · Updated Oct 6, 2026 · Assigned by Patchstack

Vendor: Creative interactive media Product: Real 3D FlipBook

Description

Unauthenticated Cross Site Scripting (XSS) in Real 3D FlipBook <= 5.5 versions.

Affected products

Vendor	Product	Affected	Fixed
Creative interactive media	Real 3D FlipBook	≤ 5.5	—

References

https://patchstack.com/database/wordpress/plugin/real3d-flipbook-lite/vulnerability/wordpress-real-3d-flipbook-plugin-5-5-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry