Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 13:51:00 +0000 EUVD-2026-282393 https://cve.radiocsirt.org/vuln/euvd-2026-282393 EUVD-2026-282393 https://cve.radiocsirt.org/vuln/euvd-2026-282393 fkie_cve-2024-9849 https://cve.radiocsirt.org/vuln/fkie_cve-2024-9849 <p>The Real3D Flipbook Lite – 3D FlipBook, PDF Viewer, PDF Embedder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the &#39;r3dfb_save_thumbnail_callback&#39; function in all versions up to, and including, 4.8. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site&#39;s server which may make remote code execution possible.</p> <p>The Real3D Flipbook Lite – 3D FlipBook, PDF Viewer, PDF Embedder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the &#39;r3dfb_save_thumbnail_callback&#39; function in all versions up to, and including, 4.8. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site&#39;s server which may make remote code execution possible.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-9849 GHSA-fx7j-93q4-w74p https://cve.radiocsirt.org/vuln/ghsa-fx7j-93q4-w74p <p>The 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the &#39;r3dfb_save_thumbnail_callback&#39; function in all versions up to, and including, 4.6. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site&#39;s server which may make remote code execution possible.</p> <p>The 3D FlipBook, PDF Viewer, PDF Embedder – Real 3D FlipBook WordPress Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the &#39;r3dfb_save_thumbnail_callback&#39; function in all versions up to, and including, 4.6. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site&#39;s server which may make remote code execution possible.</p> https://cve.radiocsirt.org/vuln/ghsa-fx7j-93q4-w74p