Description
WordPress 3D FlipBook <= 1.16.17存在敏感信息泄露，攻击者可以获取服务器敏感信息。
WordPress 3D FlipBook 存在敏感信息泄露(CVE-2026-1314)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2026-1314
https://www.cve.org/CVERecord?id=CVE-2026-1314
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/interactive-3d-flipbook-powered-physics-engine/3d-flipbook-pdf-embedder-pdf-flipbook-viewer-flipbook-image-gallery-11617-missing-authorization-to-unauthenticated-privatedraft-flipbook-data-exposure
https://www.sentinelone.com/vulnerability-database/cve-2026-1314/
https://plugins.trac.wordpress.org/changeset/3467608/
https://www.ddpoc.com/DVB-2026-11110.html
https://patchstack.com/database/wordpress/plugin/interactive-3d-flipbook-powered-physics-engine/vulnerability/wordpress-3d-flipbook-pdf-embedder-pdf-flipbook-viewer-flipbook-image-gallery-plugin-1-16-17-missing-authorization-to-unauthenticated-private-draft-flipbook-data-exposure-vulnerability
https://github.com/advisories/GHSA-xmhp-j3xp-gmh4
https://freshysites.com/security-bulletins/3d-flipbook-pdf-embedder-pdf-flipbook-viewer-flipbook-image-gallery-plugin-vulnerability-cve-2026-1314/
https://managed-wp.com/zh_cn/blogs/hardening-access-controls-for-flipbook-plugin-cve20261314-2026-04-15/