CVE-2026-1314
MEDIUM
NVD
CVSS Score
5.3
Severity
MEDIUM
Published
Apr 15, 2026
Vendor
unknown
Description
The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the send_post_pages_json() function in all versions up to, and including, 1.16.17. This makes it possible for unauthenticated attackers to retrieve flipbook page metadata for draft, private and password-protected flipbooks.