CVE-2026-1314: Iberezansky 3d Flipbook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery

Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days.

The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the send_post_pages_json() function in all versions up to, and including, 1.16.17. This makes it possible for unauthenticated attackers to retrieve flipbook page metadata for draft, private and password-protected flipbooks.

Affected products

• Iberezansky 3d Flipbook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery: up to and including 1.16.17

Published 2026-04-15. Last modified 2026-06-17.