iberezansky 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Latest iberezansky 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery vulnerabilities

CVE-2026-15758 — 3D FlipBook <= 1.16.20 - Unauthenticated Sensitive Information Exposure in 'id' Parameter (CVSS 5.3)
CVE-2026-74007 — WordPress 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery plugin <= 1.16.20 - Sensitive Data Exposure vulnerability (CVSS 5.3)
CVE-2026-1314 — 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery <= 1.16.17 - Missing Authorization to Unauthenticated Private/Draft Flipbook Data Exposure (CVSS 5.3)
CVE-2025-58226 — WordPress 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery Plugin <= 1.16.16 - Sensitive Data Exposure Vulnerability (CVSS 5.3)
CVE-2025-5289 — 3D FlipBook - Lite Edition <= 1.16.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via style and mode Parameters (CVSS 5.4)
CVE-2024-43152 — WordPress 3D FlipBook plugin <= 1.15.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
CVE-2024-3883 — 3D FlipBook <= 1.15.4 - Authenticated (Author+) Stored Cross-Site Scritping via Bookmark URL (CVSS 5.4)
CVE-2024-1081 — 3D FlipBook – PDF Flipbook WordPress <= 1.15.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Bookmarks (CVSS 5.4)
CVE-2023-6776 — 3D Flipbook <= 1.15.2 - Authenticated (Contributor+) Cross-Site Scripting via Ready Function (CVSS 5.4)
CVE-2022-4453 — 3D FlipBook <= 1.13.2 - Contributor+ Stored XSS (CVSS 5.4)
CVE-2022-0423 — 3D FlipBook < 1.12.1 - Subscriber+ Stored Cross-Site Scripting (CVSS 5.4)