Skip to content
Dearhive vulnerabilities
Newest
-
dearhive dearflip – pdf flipbook, 3d flipbook, pdf embed, pdf viewer
Dear Flipbook <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via '.df-element' Element Inner HTML
CVE-2026-8625
6.4 Medium
-
dearhive dearflip – pdf flipbook, 3d flipbook, pdf embed, pdf viewer
Dear Flipbook <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via '.dvcss' Element Class Attribute
CVE-2026-8623
6.4 Medium
-
dearhive dearflip
WordPress DearFlip plugin <= 2.4.27 - Broken Access Control vulnerability
CVE-2026-49047
4.3 Medium
-
dearhive dear flipbook – pdf flipbook, 3d flipbook, pdf embed, pdf viewer
Dear Flipbook <= 2.4.20 - Authenticated (Auhtor+) Stored Cross-Site Scripting via PDF Page Labels
CVE-2026-2569
6.4 Medium
-
dearhive dear flipbook – pdf flipbook, 3d flipbook, pdf embed, pdf viewer
Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer <= 2.3.65 - DOM-Based Reflected Cross-Site Scripting via 'pdf-source'
CVE-2025-5314
6.1 Medium
-
dearhive dear flipbook – pdf flipbook, 3d flipbook, pdf embed, pdf viewer
Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer <= 2.3.52 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-11830
6.4 Medium
-
dearhive social media share buttons | mashshare
WordPress MashShare plugin <= 4.0.47 - Broken Access Control vulnerability
CVE-2025-22319
4.3 Medium
-
dearhive dear flipbook – pdf flipbook, 3d flipbook, pdf embed, pdf viewer
PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer – DearFlip <= 2.3.32 - Reflected Cross-Site Scripting
CVE-2024-8717
6.1 Medium
-
dearhive dearflip
WordPress DearFlip plugin <= 2.2.26 - Cross Site Scripting (XSS) vulnerability
CVE-2024-29807
6.5 Medium
-
dearhive dear flipbook – pdf flipbook, 3d flipbook, pdf embed, pdf viewer, pdf flipbook\, 3d flipbook +1 more
PDF Flipbook, 3D Flipbook – DearFlip <= 2.2.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-0895
5.4 Medium
-
dearhive dearpdf, pdf viewer & 3d pdf flipbook – dearpdf +1 more
WordPress PDF Viewer & 3D PDF Flipbook – DearPDF Plugin <= 2.0.38 is vulnerable to Cross Site Scripting (XSS)
CVE-2024-23505
6.5 Medium
-
wpchill mashshare, dearhive social media share buttons | mashshare +1 more
MashShare < 3.8.7 - Contributor+ Stored XSS
CVE-2022-4544
5.4 Medium
-
dearhive dearflip, unknown pdf flipbook, 3d flipbook wordpress – dearflip +1 more
Dflip Lite < 1.7.10 - Contributor+ Stored Cross-Site Scripting
CVE-2021-24732
5.4 Medium