WordPress plugin

3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery security & vulnerabilities

Q: Does 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery have known vulnerabilities?

Yes. VulnCrest Radar lists 11 known vulnerabilities in 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery: 11 medium. None are known to affect version null.

Q: How do I check which version of 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

Q: What is the most recent 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery vulnerability?

CVE-2026-15758, published Sep 14, 2026: 3D FlipBook <= 1.16.20 - Unauthenticated Sensitive Information Exposure in 'id' Parameter. Severity: Medium (CVSS 5.3).

Q: Is any 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery vulnerability listed in CISA KEV?

No. None of the known 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery vulnerabilities is currently listed in the CISA KEV catalog.

interactive-3d-flipbook-powered-physics-engine— active installsLast vulnerability Sep 14, 2026

No known unpatched vulnerabilities in the latest version

All 11 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin

11Known vulnerabilities

Critical0
High0
Medium11
Low0

Vulnerabilities per year

All 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery vulnerabilities

3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery vulnerabilities
Severity	Vulnerability	CVE	Published
Medium5.3	Unauthenticated Sensitive Information Exposure in 'id' Parameter ≤1.16.20Update to 1.16.21	CVE-2026-15758	Sep 14
Medium5.3	Unauthenticated Information Exposure ≤1.16.20Update to 1.16.21	CVE-2026-74007	Aug 17
Medium5.3	Missing Authorization to Unauthenticated Private/Draft Flipbook Data Exposure ≤1.16.17Update to 1.16.18	CVE-2026-1314	Apr 14
Medium5.3	Unauthenticated Sensitive Information Exposure ≤1.16.16Update to 1.16.17	CVE-2025-58226	Sep 22, 2025
Medium6.4	Lite Edition <= 1.16.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via style and mode Parameters ≤1.16.15Update to 1.16.16	CVE-2025-5289	Jun 20, 2025
Medium4.4	Authenticated (Editor+) Stored Cross-Site Scripting ≤1.15.6Update to 1.15.7	CVE-2024-43152	Aug 7, 2024
Medium6.4	Authenticated (Author+) Stored Cross-Site Scritping via Bookmark URL ≤1.15.4Update to 1.15.5	CVE-2024-3883	May 1, 2024
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting via Bookmarks ≤1.15.3Update to 1.15.4	CVE-2024-1081	Feb 20, 2024
Medium6.4	Authenticated (Contributor+) Cross-Site Scripting via Ready Function ≤1.15.2Update to 1.15.3	CVE-2023-6776	Jan 2, 2024
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.13.2Update to 1.13.3	CVE-2022-4453	Dec 22, 2022
Medium6.4	Subscriber+ Stored Cross-Site Scripting <1.12.1Update to 1.12.1	CVE-2022-0423	Feb 28, 2022

Medium5.3
Unauthenticated Sensitive Information Exposure in 'id' Parameter
≤1.16.20Update to 1.16.21
CVE-2026-15758Sep 14
Medium5.3
Unauthenticated Information Exposure
≤1.16.20Update to 1.16.21
CVE-2026-74007Aug 17
Medium5.3
Missing Authorization to Unauthenticated Private/Draft Flipbook Data Exposure
≤1.16.17Update to 1.16.18
CVE-2026-1314Apr 14
Medium5.3
Unauthenticated Sensitive Information Exposure
≤1.16.16Update to 1.16.17
CVE-2025-58226Sep 22, 2025
Medium6.4
Lite Edition <= 1.16.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via style and mode Parameters
≤1.16.15Update to 1.16.16
CVE-2025-5289Jun 20, 2025
Medium4.4
Authenticated (Editor+) Stored Cross-Site Scripting
≤1.15.6Update to 1.15.7
CVE-2024-43152Aug 7, 2024
Medium6.4
Authenticated (Author+) Stored Cross-Site Scritping via Bookmark URL
≤1.15.4Update to 1.15.5
CVE-2024-3883May 1, 2024
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting via Bookmarks
≤1.15.3Update to 1.15.4
CVE-2024-1081Feb 20, 2024
Medium6.4
Authenticated (Contributor+) Cross-Site Scripting via Ready Function
≤1.15.2Update to 1.15.3
CVE-2023-6776Jan 2, 2024
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.13.2Update to 1.13.3
CVE-2022-4453Dec 22, 2022
Medium6.4
Subscriber+ Stored Cross-Site Scripting
<1.12.1Update to 1.12.1
CVE-2022-0423Feb 28, 2022

3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery: common questions

Does 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery have known vulnerabilities?

Yes. VulnCrest Radar lists 11 known vulnerabilities in 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery: 11 medium. None are known to affect version null.

How do I check which version of 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery vulnerability?

CVE-2026-15758, published Sep 14, 2026: 3D FlipBook <= 1.16.20 - Unauthenticated Sensitive Information Exposure in 'id' Parameter. Severity: Medium (CVSS 5.3).

Is any 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery vulnerability listed in CISA KEV?

No. None of the known 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery vulnerabilities is currently listed in the CISA KEV catalog.