UNKNOWN NVD

CVE-2025-15696

The Real3D Flipbook WordPress plugin before 5.4 does not sanitize or escape several flipbook editor fields before rendering them back in the admin editor, allo

The Real3D Flipbook WordPress plugin before 5.4 does not sanitize or escape several flipbook editor fields before rendering them back in the admin editor, allowing users with the Author role and above to inject arbitrary web scripts that execute in the browser of any user who later opens the affected flipbook for editing, including administrators.

References

https://wpscan.com/vulnerability/7b454d8e-e2cd-4990-a72d-339b8065d359/

Published: 2026-09-23 · Source: NVD · Feed updated: 2026-09-23

This unknown severity vulnerability was published on 2026-09-23 via NVD.

vulnfeed aggregates 4195 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.