CVE-2026-15758mediumCWE-200

CVE-2026-15758: fallo de gravedad media en iberezansky 3D FlipBook – PDF Embedder, PDF…

3D FlipBook <= 1.16.20 - Unauthenticated Sensitive Information Exposure in 'id' Parameter

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.3epss 0.5%
The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.16.20 via the 'id' parameter. This makes it possible for unauthenticated attackers to extract sensitive data including the full metadata payload of password-protected flipbooks — including title, outline, props, and the serialized data blob containing the underlying PDF file's direct URL — bypassing WordPress post-password confidentiality. Flipbook post IDs can be pre-enumerated via the also-unauthenticated fb3d_send_posts AJAX action, requiring no prior knowledge to target specific flipbooks.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Productos afectados
iberezansky · 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery
CVEs relacionadas — iberezansky 3D FlipBook – PDF Embedder, PDF…

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-1314MEDIUM3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery <= 1.16.17 - Missing Authorization to Unauthenticated Private/Draft Flipbook Data ExposureEPSS 0.9%CVE-2023-6776MEDIUM3D Flipbook <= 1.15.2 - Authenticated (Contributor+) Cross-Site Scripting via Ready FunctionEPSS 0.3%CVE-2024-3883MEDIUM3D FlipBook <= 1.15.4 - Authenticated (Author+) Stored Cross-Site Scritping via Bookmark URLEPSS 0.3%CVE-2024-1081MEDIUM3D FlipBook – PDF Flipbook WordPress <= 1.15.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via BookmarksEPSS 0.3%CVE-2025-5289MEDIUM3D FlipBook - Lite Edition <= 1.16.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via style and mode ParametersEPSS 0.3%