WordPress 3D FlipBook CVE-2025-58226 sensitive data dump

CVE-2025-58226 ≤ 1.16.16: unauthenticated admin-ajax actions fb3dsendposts and fb3dsendpost expose all flipbook posts including password-protected, metadata, and backing PDF/media URLs. Read-only information disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """CVE-2025-58226 — 3D FlipBook...

Exploit for CVE-2025-58226

CVE-2025-58226 — 3D FlipBook ≤ 1.16.16 Unauthenticated Sensiti...

CVE-2026-15758 3D FlipBook <= 1.16.20 - Unauthenticated Sensitive Information Exposure in 'id' Parameter

The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.16.20 via the 'id' parameter. This makes it possible for unauthenticated attackers to extract sensitive data...

CVE-2026-15758: Exposure of Sensitive Information to an Unauthorized Actor

The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.16.20 via the 'id' parameter. This makes it possible for unauthenticated attackers to extract sensitive data...

WordPress 3D FlipBook Plugin <= 1.16.17 - Sensitive Information Exposure Detection

The 3D FlipBook WordPress plugin ≤ v1.16.17 has a vulnerability where an unauthenticated AJAX action fb3dsendposts exposes sensitive data. Attackers can access all flipbook posts—including password-protected content, metadata, PDF URLs, and plugin settings—without authorization. !/usr/bin/env...