CVE-2016-10966

Impact

The real3d-flipbook-lite plugin 1.0 for WordPress has bookName=../ directory traversal for file upload.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://mukarramkhalid.com/wordpress-real-3d-flipbook-plugin-exploit/
• https://wordpress.org/plugins/real3d-flipbook-lite/#developers
• https://mukarramkhalid.com/wordpress-real-3d-flipbook-plugin-exploit/
• https://wordpress.org/plugins/real3d-flipbook-lite/#developers