Priority MEDIUM 60
The 3D FlipBook WordPress plugin through 1.13.2 does not validate or escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as Contributor to perform S…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00539 · Published 2023-01-16 · No fix listed CWE-79
Priority LOW 32
The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the send_post_pages_json() function in al…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00892 · Published 2026-04-14 · No fix listed CWE-862
Priority LOW 31
Insertion of Sensitive Information Into Sent Data vulnerability in iberezansky 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery interactive-3d-flipbook-powered-physics-engine allows Retrieve Embedded Sensitive D…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00719 · Published 2025-09-22 · No fix listed CWE-201
Priority LOW 30
Unauthenticated Sensitive Data Exposure in 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery <= 1.16.20 versions.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0033 · Published 2026-08-18 · No fix listed CWE-497
Priority LOW 30
The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.16.20 via the 'id' parameter.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0047 · Published 2026-09-15 · No fix listed CWE-200
Priority LOW 28
The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘style’ and 'mode' parameters in all versions up to, and including, 1.…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00254 · Published 2025-06-21 · No fix listed CWE-79
Priority LOW 28
The 3D FlipBook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Bookmark URL field in all versions up to, and including, 1.15.4 due to insufficient input sanitization and output escaping.
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.0032 · Published 2024-05-02 · No fix listed CWE-79
Priority LOW 28
The 3D FlipBook – PDF Flipbook WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bookmark feature in all versions up to, and including, 1.15.3 due to insufficient input sanitiza…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.0032 · Published 2024-02-21 · No fix listed CWE-79
Priority LOW 28
The 3D FlipBook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Ready Function’ field in all versions up to, and including, 1.15.2 due to insufficient input sanitization and output escaping.
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00335 · Published 2024-01-11 · No fix listed CWE-79
Priority LOW 27
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in iberezansky 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery allows Stored XSS.This issue affects 3D F…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00297 · Published 2024-08-12 · No fix listed CWE-79
Priority LOW 25
The 3D FlipBook WordPress plugin before 1.12.1 does not have authorisation and CSRF checks when updating its settings, and does not have any sanitisation/escaping, allowing any authenticated users, such as subscriber to…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.006 · Published 2022-03-21 · Fixed in 1.12.1 CWE-79