CVE-2026-15758mediumCWE-200

CVE-2026-15758: falha de média gravidade em iberezansky 3D FlipBook – PDF Embedder, PDF…

3D FlipBook <= 1.16.20 - Unauthenticated Sensitive Information Exposure in 'id' Parameter

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.5%
The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.16.20 via the 'id' parameter. This makes it possible for unauthenticated attackers to extract sensitive data including the full metadata payload of password-protected flipbooks — including title, outline, props, and the serialized data blob containing the underlying PDF file's direct URL — bypassing WordPress post-password confidentiality. Flipbook post IDs can be pre-enumerated via the also-unauthenticated fb3d_send_posts AJAX action, requiring no prior knowledge to target specific flipbooks.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
iberezansky · 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery
CVEs relacionadas — iberezansky 3D FlipBook – PDF Embedder, PDF…

No mesmo produto, das mais perigosas para as menos.

CVE-2026-1314MEDIUM3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery <= 1.16.17 - Missing Authorization to Unauthenticated Private/Draft Flipbook Data ExposureEPSS 0.9%CVE-2023-6776MEDIUM3D Flipbook <= 1.15.2 - Authenticated (Contributor+) Cross-Site Scripting via Ready FunctionEPSS 0.3%CVE-2024-3883MEDIUM3D FlipBook <= 1.15.4 - Authenticated (Author+) Stored Cross-Site Scritping via Bookmark URLEPSS 0.3%CVE-2024-1081MEDIUM3D FlipBook – PDF Flipbook WordPress <= 1.15.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via BookmarksEPSS 0.3%CVE-2025-5289MEDIUM3D FlipBook - Lite Edition <= 1.16.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via style and mode ParametersEPSS 0.3%