{"id":"CVE-2026-86842","title":"The Real3D Flipbook  WordPress plugin before 5.4 does not perform capability checks on several of its authenticated flipbook management actions, allowing users with Author-level access and above to delete other users' flipbook content an…","summary":"The Real3D Flipbook  WordPress plugin before 5.4 does not perform capability checks on several of its authenticated flipbook management actions, allowing users with Author-level access and above to delete other users' flipbook content an…","severity":"medium","cvss":6.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-862","CWE-79"],"product":"Real3D Flipbook","affected":["real3d_flipbook < 5.4"],"published":"2026-09-23","updated":"2026-09-23","sourceUpdated":"2026-09-23T18:13:31.210","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86842","references":[{"url":"https://wpscan.com/vulnerability/b98713d1-e618-4728-baea-f26015e24b60/","label":"contact@wpscan.com"}],"tags":["nvd","cve.org"],"epss":0.00218,"epssPercentile":0.10816,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-09-23T10:39:32.693971Z"},"ingestedAt":"2026-09-23T06:17:57.895Z","slug":"CVE-2026-86842","body":"## Overview\n\nThe Real3D Flipbook  WordPress plugin before 5.4 does not perform capability checks on several of its authenticated flipbook management actions, allowing users with Author-level access and above to delete other users' flipbook content and overwrite administrator-only global settings, which can be leveraged to store JavaScript that executes in the context of any visitor or administrator viewing the site.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":37,"depthScoreParts":{"impact":37.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":209608,"id":"CVE-2026-86842","ts":1790162587339,"field":"cvss","old":null,"new":"6.8"},{"seq":209607,"id":"CVE-2026-86842","ts":1790162587339,"field":"severity","old":"none","new":"medium"}]}