Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: iberezansky Component: 3d Flipbook Clear all filters
TI-2025-04752 CVE-2025-5289 · GHSA-r9wm-6jrg-58c5

Cross-site scripting in iberezansky 3D FlipBook – PDF Embedder, PDF Flipbook Viewer…

Priority LOW 28

The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘style’ and 'mode' parameters in all versions up to, and including, 1.…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00254 Published 2025-06-21 No fix listed CWE-79
TI-2024-28823 CVE-2024-43152 · GHSA-4r3v-6hh6-vhf4

WordPress 3D FlipBook plugin <= 1.15.6 - Cross Site Scripting (XSS) vulnerability

Priority LOW 27

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in iberezansky 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery allows Stored XSS.This issue affects 3D F…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00297 Published 2024-08-12 No fix listed CWE-79
TI-2024-01002 CVE-2024-1081 · GHSA-9hf7-7328-32vm

3D FlipBook – PDF Flipbook WordPress <= 1.15.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Bookmarks

Priority LOW 28

The 3D FlipBook – PDF Flipbook WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bookmark feature in all versions up to, and including, 1.15.3 due to insufficient input sanitiza…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0032 Published 2024-02-21 No fix listed CWE-79
TI-2023-06191 CVE-2023-6776 · GHSA-4pvg-ch2h-8mph

3D Flipbook <= 1.15.2 - Authenticated (Contributor+) Cross-Site Scripting via Ready Function

Priority LOW 28

The 3D FlipBook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Ready Function’ field in all versions up to, and including, 1.15.2 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00335 Published 2024-01-11 No fix listed CWE-79
TI-2022-04070 CVE-2022-4453 · GHSA-9r6q-f96q-7hq4

3D FlipBook <= 1.13.2 - Contributor+ Stored XSS

Priority MEDIUM 60

The 3D FlipBook WordPress plugin through 1.13.2 does not validate or escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as Contributor to perform S…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00539 Published 2023-01-16 No fix listed CWE-79
TI-2022-00347 CVE-2022-0423 · GHSA-c583-9xxq-8f2p

3D FlipBook < 1.12.1 - Subscriber+ Stored Cross-Site Scripting

Priority LOW 25

The 3D FlipBook WordPress plugin before 1.12.1 does not have authorisation and CSRF checks when updating its settings, and does not have any sanitisation/escaping, allowing any authenticated users, such as subscriber to…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.006 Published 2022-03-21 Fixed in 1.12.1 CWE-79