Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

12 records

Vendor: dearhive Clear all filters
TI-2026-07581 CVE-2026-8625 · GHSA-7vxj-qhff-f4pc

Dear Flipbook <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via '.df-element' Element Inner HTML

Priority LOW 28

The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (Custom HTML block inner HTML)' parameter in all versions up to…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00357 Published 2026-09-05 No fix listed CWE-79
TI-2026-07579 CVE-2026-8623 · GHSA-35hh-c4h4-vp3q

Dear Flipbook <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via '.dvcss' Element Class Attribute

Priority LOW 28

The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (class attribute of .dvcss element)' parameter in all versions…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00349 Published 2026-09-05 No fix listed CWE-79
TI-2026-02195 CVE-2026-2569 · GHSA-vxj8-gcrq-pf8h

Dear Flipbook <= 2.4.20 - Authenticated (Auhtor+) Stored Cross-Site Scripting via PDF Page Labels

Priority LOW 28

The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PDF page labels in all versions up to, and including, 2.4.20 due to insufficient…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00176 Published 2026-03-10 No fix listed CWE-79
TI-2025-04770 CVE-2025-5314 · GHSA-ggf3-722x-xv73

Cross-site scripting in dearhive Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed…

Priority LOW 27

The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to DOM-Based Reflected Cross-Site Scripting via the ‘pdf-source’ parameter in all versions up to, and including, 2.3…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00323 Published 2025-07-01 No fix listed CWE-79
TI-2024-10974 CVE-2024-11830 · GHSA-3wqh-cc4x-r6p5

Cross-site scripting in dearhive Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed…

Priority LOW 28

The PDF Flipbook, 3D Flipbook—DearFlip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via outline settings in all versions up to 2.3.52 due to insufficient input sanitization and output escaping on use…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00326 Published 2025-01-08 No fix listed CWE-79
TI-2025-16223 CVE-2025-22319 · GHSA-vmx9-cf98-29xx

WordPress MashShare plugin <= 4.0.47 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in DearHive Social Media Share Buttons | MashShare.This issue affects Social Media Share Buttons | MashShare: from n/a through 4.0.47.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00356 Published 2025-01-07 No fix listed CWE-862
TI-2024-08086 CVE-2024-8717 · GHSA-cfg2-65mf-m2pq

PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer – DearFlip <= 2.3.32 - Reflected Cross-Site Scripting

Priority LOW 28

The PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer – DearFlip plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'pdf_source' parameter in all versions up to, and including, 2.3.32 due to insu…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00458 Published 2024-10-24 No fix listed CWE-79
TI-2024-19583 CVE-2024-29807 · GHSA-w23c-wpw6-cxpq

WordPress DearFlip plugin <= 2.2.26 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DearHive DearFlip allows Stored XSS.This issue affects DearFlip: from n/a through 2.2.26.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00336 Published 2024-03-27 No fix listed CWE-79
TI-2024-00824 CVE-2024-0895 · GHSA-jc8h-8h7p-qc4h

PDF Flipbook, 3D Flipbook – DearFlip <= 2.2.26 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 25

The PDF Flipbook, 3D Flipbook – DearFlip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via outline settings in all versions up to, and including, 2.2.26 due to insufficient input sanitization and outp…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00438 Published 2024-02-03 No fix listed CWE-79
TI-2024-15547 CVE-2024-23505 · GHSA-7hrx-5vq8-6933

WordPress PDF Viewer & 3D PDF Flipbook – DearPDF Plugin <= 2.0.38 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DearHive PDF Viewer & 3D PDF Flipbook – DearPDF allows Stored XSS.This issue affects PDF Viewer & 3D PDF Flipbook – De…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0031 Published 2024-01-31 No fix listed CWE-79
TI-2021-07014 CVE-2021-24732 · GHSA-5jgv-8q3q-fffv

Dflip Lite < 1.7.10 - Contributor+ Stored Cross-Site Scripting

Priority LOW 25

The PDF Flipbook, 3D Flipbook WordPress – DearFlip WordPress plugin before 1.7.10 does not escape the class attribute of its shortcode before outputting it back in an attribute, which could allow users with a role as low…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0065 Published 2021-10-18 Fixed in 1.7.10 CWE-79