CVE

CVE-2025-58226

5.3

CVSSmedium

Exploitable remotely over the internet · no authentication required.

Description

Insertion of Sensitive Information Into Sent Data vulnerability in iberezansky 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery interactive-3d-flipbook-powered-physics-engine allows Retrieve Embedded Sensitive Data.This issue affects 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery: from n/a through <= 1.16.16.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

3d flipbook – pdf flipbook viewer, flipbook image gallery

Updated Nov 10, 2026View on NVD →

S4E scanner

mediumMisconfiguration~10 seconds

WordPress 3D FlipBook Plugin <= 1.16.17 - Sensitive Information Exposure

The 3D FlipBook WordPress plugin ( v1.16.17) has a vulnerability where an unauthenticated AJAX action (fb3d_send_posts) exposes sensitive data. Attackers can access all flipbook postsincluding password-protected content, metadata, PDF URLs, and plugin settingswithout authorization. References: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/interactive-3d-flipbook-powered-physics-engine/ https://patchstack.com/database/wordpress/plugin/interactive-3d-flipbook-powered-physics-engine/vulnerability/... https://plugins.svn.wordpress.org/interactive-3d-flipbook-powered-physics-engine/ Remediation: Update to the latest version.

url

Scanner page →Run scanner

CVE history: 3d flipbook – pdf flipbook viewer, flipbook image gallery

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →