Extension WordPress

Vulnérabilités 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery

Cette page rassemble les failles publiées pour 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery, leurs plages de versions affectées et les correctifs signalés dans la base locale.

9Vulnérabilités
0Critiques
9Avec correctif
6,4CVSS maximal

Historique de sécurité

CVE et vulnérabilités de 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery

9 fiches

CVE-2026-1314 Moyenne · 5,3
3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery

3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery <= 1.16.17 – Missing Authorization to Unauthenticated Private/Draft Flipbook Data Exposure

The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the send_post_pages_json() function in all versions up to, and…

Versions affectées

*-1.16.17

Correctif

1.16.18

Publication

14/04/2026

CVE-2025-58226 Moyenne · 5,3
3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery

3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery <= 1.16.16 – Unauthenticated Sensitive Information Exposure

The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.16.16. This makes it possible for unauthenticated attackers to extract…

Versions affectées

*-1.16.16

Correctif

1.16.17

Publication

22/09/2025

CVE-2025-5289 Moyenne · 6,4
3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery

3D FlipBook – Lite Edition <= 1.16.15 – Authenticated (Contributor+) Stored Cross-Site Scripting via style and mode Parameters

The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘style’ and 'mode' parameters in all versions up to, and including, 1.16.15 due to insufficient…

Versions affectées

*-1.16.15

Correctif

1.16.16

Publication

21/06/2025

CVE-2024-43152 Moyenne · 4,4
3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery

3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery <= 1.15.6 – Authenticated (Editor+) Stored Cross-Site Scripting

The 3D FlipBook – PDF Flipbook WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via settings in all versions up to, and including, 1.15.6 due to insufficient input sanitization and output escaping. This makes it possible…

Versions affectées

*-1.15.6

Correctif

1.15.7

Publication

07/08/2024

CVE-2024-3883 Moyenne · 6,4
3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery

3D FlipBook <= 1.15.4 – Authenticated (Author+) Stored Cross-Site Scritping via Bookmark URL

The 3D FlipBook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Bookmark URL field in all versions up to, and including, 1.15.4 due to insufficient input sanitization and output escaping. This makes it possible for…

Versions affectées

*-1.15.4

Correctif

1.15.5

Publication

01/05/2024

CVE-2024-1081 Moyenne · 6,4
3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery

3D FlipBook – PDF Flipbook WordPress <= 1.15.3 – Authenticated (Contributor+) Stored Cross-Site Scripting via Bookmarks

The 3D FlipBook – PDF Flipbook WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bookmark feature in all versions up to, and including, 1.15.3 due to insufficient input sanitization and output escaping. This…

Versions affectées

*-1.15.3

Correctif

1.15.4

Publication

20/02/2024

CVE-2023-6776 Moyenne · 6,4
3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery

3D Flipbook <= 1.15.2 – Authenticated (Contributor+) Cross-Site Scripting via Ready Function

The 3D FlipBook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Ready Function’ field in all versions up to, and including, 1.15.2 due to insufficient input sanitization and output escaping. This makes it possible for…

Versions affectées

*-1.15.2

Correctif

1.15.3

Publication

02/01/2024

CVE-2022-4453 Moyenne · 6,4
3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery

3D FlipBook <= 1.13.2 – Authenticated (Contributor+) Stored Cross-Site Scripting

The 3D FlipBook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in versions up to, and including, 1.13.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…

Versions affectées

*-1.13.2

Correctif

1.13.3

Publication

22/12/2022

CVE-2022-0423 Moyenne · 6,4
3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery

3D FlipBook <= 1.12.0 – Subscriber+ Stored Cross-Site Scripting

The 3D FlipBook WordPress plugin before 1.12.1 does not have authorisation and CSRF checks when updating its settings, and does not have any sanitisation/escaping, allowing any authenticated users, such as subscriber to put Cross-Site Scripting payloads in all…

Versions affectées

[*, 1.12.1)

Correctif

1.12.1

Publication

28/02/2022

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités