https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-5289.htmlhttps://patchthecve.com/cve/CVE-2025-5289.htmlWed, 17 Jun 2026 09:47:37 +0000MEDIUM 6.4: The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘style’ and 'mode' parameters in all versions up to, and including, 1.16.15 due to insufficient input sanitization and output escaping. This makes it https://patchthecve.com/cve/CVE-2024-43152.htmlhttps://patchthecve.com/cve/CVE-2024-43152.htmlWed, 17 Jun 2026 07:50:31 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in iberezansky 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery allows Stored XSS.This issue affects 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery: from n/a through 1.15.6.https://patchthecve.com/cve/CVE-2024-3883.htmlhttps://patchthecve.com/cve/CVE-2024-3883.htmlWed, 17 Jun 2026 07:45:23 +0000MEDIUM 6.4: The 3D FlipBook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Bookmark URL field in all versions up to, and including, 1.15.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and abovehttps://patchthecve.com/cve/CVE-2024-1081.htmlhttps://patchthecve.com/cve/CVE-2024-1081.htmlWed, 17 Jun 2026 07:03:24 +0000MEDIUM 6.4: The 3D FlipBook – PDF Flipbook WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bookmark feature in all versions up to, and including, 1.15.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers withttps://patchthecve.com/cve/CVE-2023-6776.htmlhttps://patchthecve.com/cve/CVE-2023-6776.htmlWed, 17 Jun 2026 06:51:24 +0000MEDIUM 6.4: The 3D FlipBook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Ready Function’ field in all versions up to, and including, 1.15.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access