CVE-2022-0423

CVE-2022-0423 affects the WordPress 3D FlipBook plugin up to version 1.12.0 (versions before 1.12.1). The root cause is missing authorization checks, CSRF protection, and input sanitisation/escaping during settings updates, allowing authenticated users (e.g., subscribers) to perform stored Cross-...

CVE-2024-1081

CVE-2024-1081 affects the 3D FlipBook – PDF Flipbook WordPress plugin. All versions

CVE-2023-6776

CVE-2023-6776 affects the WordPress plugin 3D FlipBook – PDF Flipbook Viewer

CVE-2022-4453

The CVE-2022-4453 issue affects the WordPress plugin 3D FlipBook up to version 1.13.2 (and earlier). The vulnerability arises from not validating/escaping certain shortcode attributes before output, enabling Stored XSS where a user with as little as Contributor privileges can target high-privileg...

CVE-2024-3883

The CVE 3D FlipBook – PDF Flipbook WordPress vulnerability (CVE-2024-3883) affects the WordPress 3D FlipBook plugin. It enables Stored Cross-Site Scripting via the Bookmark URL field in all versions up to and including 1.15.4 due to insufficient input sanitization and output escaping. The attack ...

CVE-2024-43152

CVE-2024-43152 is a stored XSS in the iberezansky 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery WordPress plugin. Root cause: Improper input neutralization during web page generation. Affected: 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery (versions from n/a to 1.15.6). Pu...

CVE-2025-5289

The WordPress plugin 3D FlipBook (Lite Edition) – including PDF Embedder, PDF Flipbook Viewer, and Flipbook Image Gallery, version