CVE-2026-1314 Scanner
CVE-2026-1314 Scanner - Information Disclosure vulnerability in WordPress 3D FlipBook - PDF Flipbook Viewer, Flipbook Image Gallery
Used 2.7k times · 4.2k assets checked · domain, subdomain, ipv4
CVE
CVE-2026-1314
5.3
CVSSmedium
Exploitable remotely over the internet · no authentication required.
Description
The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the send_post_pages_json() function in all versions up to, and including, 1.16.17. This makes it possible for unauthenticated attackers to retrieve flipbook page metadata for draft, private and password-protected flipbooks.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
3d flipbook – pdf embedder, pdf flipbook viewer, flipbook image gallery
Updated Nov 6, 2026View on NVD →
S4E scanner
CVE history: 3d flipbook – pdf embedder, pdf flipbook viewer, flipbook image gallery
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →