The vulnerability is a missing authorization flaw in the Codelobster Responsive Flipbooks WordPress plugin. It allows an attacker who can reach the plugin’s control panels or content pages to bypass the intended access controls and view, edit, or delete flipbook material without permission. The resulting data exposure or manipulation can undermine confidentiality, integrity, and potentially availability of the published flipbooks.

Codelobster Responsive Flipbooks plugin versions up to and including 1.0 are affected. Any WordPress site that installs this plugin while running a version 1.0 or earlier is at risk.

The CVSS base score of 5.4 indicates a moderate severity, and the EPSS value below 1% suggests that exploitation is presently unlikely but possible. Because the flaw was identified as a broken access control in a web‑based plugin, the attack vector is most likely through web requests to the plugin’s administrative routes, potentially from an unauthenticated or low‑privileged user. The vulnerability is not listed in the CISA KEV catalog at this time.