PT-2025-53083 · WordPress · Real3D-Flipbook-Lite+1

Dj + 1 · Published 2025-12-24 · Updated 2025-12-26 · CVE-2025-68512

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Real 3D FlipBook versions through 4.11.4

Description The Real 3D FlipBook plugin contains a flaw due to improper neutralization of input during web page generation, leading to a Stored Cross-site Scripting (XSS) condition. This allows an attacker to inject malicious scripts into web pages viewed by other users. The vulnerability exists in the real3d-flipbook-lite component.

Recommendations Update Real 3D FlipBook to a version newer than 4.11.4.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-68512

Affected Products

Real 3D Flipbook

Real3D-Flipbook-Lite

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-68512 · Security Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/real3d-flipbook-lite/vulnerability/wordpress-real-3d-flipbook-plugin-4-11-4-cross-site-scripting-xss-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2004457758507311209 · Twitter Post
• https://t.me/CVEtracker/40567 · Telegram Post
• https://patchstack.com/database/Wordpress/Plugin/real3d-flipbook-lite/vulnerability/wordpress-real-3d-flipbook-plugin-4-11-4-cross-site-scripting-xss-vulnerability?_s_id=cve · Note