CVE-2026-1314

Name of the Vulnerable Software and Affected Versions 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery versions prior to 1.16.18

Description This plugin for WordPress allows unauthenticated attackers to retrieve flipbook page metadata for draft, private, and password-protected flipbooks. This occurs due to a missing capability check in the send post pages json() function.

Recommendations Update to a version later than 1.16.17. As a temporary workaround, consider disabling the send post pages json() function until the update is applied.