TI-2025-26251 CVE-2025-39509 · GHSA-26rj-c885-v2wvWordPress TNC FlipBook plugin <= 12.1.0 - Cross Site Scripting (XSS) vulnerabilityPriority LOW 28Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeNcode TNC FlipBook pdf-viewer-for-wordpress allows Stored XSS.This issue affects TNC FlipBook: from n/a through <…CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00263 · Published 2025-05-16 · No fix listed CWE-79