Unauthenticated Server Side Request Forgery in 3D Flipbook PDF Viewer by WordPress
CVE-2026-59552

7.2HIGH

Key Information:

Vendor

WordPress
Status
3d Flipbook PDF Viewer & Embedder
Vendor
CVE Published:
27 July 2026

What is CVE-2026-59552?

The 3D Flipbook PDF Viewer & Embedder plugin for WordPress, version 1.4.2 and earlier, contains an unauthenticated Server Side Request Forgery (SSRF) vulnerability. This flaw allows attackers to exploit the plugin by sending crafted requests that can access internal resources, potentially exposing sensitive data or enabling further attacks on the server. Site administrators are advised to update to the latest version of the plugin to mitigate this risk.

Affected Version(s)

3D Flipbook PDF Viewer &amp; Embedder <= 1.4.2

References

https://patchstack.com/database/wordpress/plugin/pdf-embe...
vdb-entry

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nabil Irawan | Patchstack Bug Bounty Program
.