Log in Start free

DearHive

Products

ProductCVEsExploitedLatest
Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer5–Mar 10, 2026
DearFlip2–May 27, 2026
DearFlip – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer2–Sep 5, 2026
PDF Viewer & 3D PDF Flipbook – DearPDF1–Jan 31, 2024
Social Media Share Buttons | MashShare1–Jan 7, 2025

Exploited and recent CVEs

  • CVE-2026-8625 Medium 6.4 Dear Flipbook <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via '.df-element' Element Inner HTML 0.4%
  • CVE-2026-8623 Medium 6.4 Dear Flipbook <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via '.dvcss' Element Class Attribute 0.3%
  • CVE-2026-49047 Medium 4.3 WordPress DearFlip plugin <= 2.4.27 - Broken Access Control vulnerability 0.2%
  • CVE-2026-2569 Medium 6.4 Dear Flipbook <= 2.4.20 - Authenticated (Auhtor+) Stored Cross-Site Scripting via PDF Page Labels 0.2%
  • CVE-2025-5314 Medium 6.1 Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer <= 2.3.65 - DOM-Based Reflected Cross-Site Scripting via 'pdf-source' 0.3%
  • CVE-2024-11830 Medium 6.4 Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer <= 2.3.52 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2025-22319 Medium 4.3 WordPress MashShare plugin <= 4.0.47 - Broken Access Control vulnerability 0.4%
  • CVE-2024-8717 Medium 6.1 PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer – DearFlip <= 2.3.32 - Reflected Cross-Site Scripting 0.5%
  • CVE-2024-29807 Medium 6.5 WordPress DearFlip plugin <= 2.2.26 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-0895 Medium 5.4 PDF Flipbook, 3D Flipbook – DearFlip <= 2.2.26 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
  • CVE-2024-23505 Medium 6.5 WordPress PDF Viewer & 3D PDF Flipbook – DearPDF Plugin <= 2.0.38 is vulnerable to Cross Site Scripting (XSS) 0.3%