CVE-2025-58226

MediumCVSS 5.3

Published: 22/09/2025(UTC)Updated: 11/10/2026(UTC)Translated: 12/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.75%

54th percentile - higher than 54% of all known CVEs

Summary

The WordPress plugin 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery (versions up to and including 1.16.16) contains an Insertion of Sensitive Information Into Sent Data vulnerability. This may allow retrieval of embedded sensitive data.

Risk Assessment

An attacker may gain access to sensitive information embedded in data sent by the plugin, potentially leading to data leakage. This may compromise the confidentiality of information processed on the WordPress site.

Recommendation

Update the 3D FlipBook plugin to a version later than 1.16.16 as soon as a fix is available. Until then, consider disabling the plugin.

Other vulnerabilities in 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery

CVE-2026-74007Medium
Unauthenticated Sensitive Data Exposure in 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery <= 1.16.20 versions.

Original NVD description (English source)

Insertion of Sensitive Information Into Sent Data vulnerability in iberezansky 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery interactive-3d-flipbook-powered-physics-engine allows Retrieve Embedded Sensitive Data.This issue affects 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery: from n/a through <= 1.16.16.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS