Threat Database

Threat Entry Updated 2026-06-17

Ipages Flipbook - Broken Access Control (CVE-2024-33909)

Missing Authorization vulnerability in Avirtum iPages Flipbook allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects iPages Flipbook: from n/a through 1.5.1.

PLUGIN Ipages Flipbook

CVE-2024-33909

MEDIUM CVSS 5.3 2026-06-17

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Ipages Flipbook - Broken Access Control (CVE-2024-4744)

Missing Authorization vulnerability in Avirtum iPages Flipbook.This issue affects iPages Flipbook: from n/a through 1.5.1.

PLUGIN Ipages Flipbook

CVE-2024-4744

MEDIUM CVSS 5.3 2024-06-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Ipages Flipbook - SQL Injection (CVE-2023-47236)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Avirtum iPages Flipbook For WordPress.This issue affects iPages Flipbook For WordPress: from n/a through 1.4.8.

PLUGIN Ipages Flipbook

CVE-2023-47236

HIGH CVSS 7.6 2023-12-20

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Ipages Flipbook - Cross-Site Scripting (XSS) (CVE-2022-4394)

The iPages Flipbook For WordPress plugin through 1.4.6 does not sanitise and escape some of its settings, which could allow users such as contributor+ to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

PLUGIN Ipages Flipbook

CVE-2022-4394

MEDIUM CVSS 5.4 2023-01-09

Risk Score

Open Full Technical Breakdown