CVEPublished 2026-04-151 article on news5 live referencesNVD data

CVE-2026-1314

Vulnerability data via CVEDB (Shodan)

CVSS v3.1
5.3
MEDIUM
EPSS percentile
55
Exploit Prediction Scoring System · top 45% of all CVEs
Description

The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the send_post_pages_json() function in all versions up to, and including, 1.16.17. This makes it possible for unauthenticated attackers to retrieve flipbook page metadata for draft, private and password-protected flipbooks.

Timeline
Published 2026-04-15

External references

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

More intel sources (5)

Known PoCs on GitHub (3)