Plugin icon

3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery

interactive-3d-flipbook-powered-physics-engine

Vulnerabilities:

9

Last Updated:

March 11, 2026

Active Installs:

80000

Published
Title
Fixed in
CVSS
Published
2026-04-14
Title
3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery < 1.16.18 - Missing Authorization to Unauthenticated Private/Draft Flipbook Data Exposure
Fixed in
Fixed in 1.16.18
CVSS
5.3 (medium)
Published
2025-09-22
Title
3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery < 1.16.17 - Unauthenticated Sensitive Information Exposure
Fixed in
Fixed in 1.16.17
CVSS
5.3 (medium)
Published
2025-06-20
Title
3D FlipBook - Lite Edition < 1.16.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via style and mode Parameters
Fixed in
Fixed in 1.16.16
CVSS
6.4 (medium)
Published
2024-08-07
Title
3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery < 1.15.7 - Authenticated (Editor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.15.7
CVSS
4.4 (medium)
Published
2024-05-01
Title
3D FlipBook < 1.15.5 - Authenticated (Author+) Stored Cross-Site Scritping via Bookmark URL
Fixed in
Fixed in 1.15.5
CVSS
6.4 (medium)
Published
2024-02-20
Title
3D FlipBook – PDF Flipbook WordPress < 1.15.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Bookmarks
Fixed in
Fixed in 1.15.4
CVSS
6.4 (medium)
Published
2024-01-02
Title
3D Flipbook < 1.15.3 - Contributor+ Stored XSS
Fixed in
Fixed in 1.15.3
CVSS
5.9 (medium)
Published
2022-12-22
Title
3D FlipBook < 1.13.3 - Contributor+ Stored XSS
Fixed in
Fixed in 1.13.3
CVSS
6.8 (medium)
Published
2022-02-28
Title
3D FlipBook < 1.12.1 - Subscriber+ Stored Cross-Site Scripting
Fixed in
Fixed in 1.12.1
CVSS
6.4 (medium)