Description (CNA)
The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the send_post_pages_json() function in all versions up to, and including, 1.16.17. This makes it possible for unauthenticated attackers to retrieve flipbook page metadata for draft, private and password-protected flipbooks.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| iberezansky / 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery | affected 0 through 1.16.17 |
CWE
CWE-862
References
- https://www.wordfence.com/threat-intel/vulnerabilities/id/d7e41753-2dbf-4afa-b61e-e617be2c4dc2?source=cve
- https://plugins.trac.wordpress.org/changeset/3467608/
ADP enrichment
No English description supplied.
No references supplied.