Dearhive

9 CVEs across 6 Dearhive products. Browse Dearhive vulnerabilities, severities, and proof-of-concept exploits.

Dearhive products with known CVEs

ProductCVEs
Dear Flipbook – Pdf Flipbook, 3d Flipbook, Pdf Embed, Pdf Viewer5
Dearflip3
Dearpdf1
Pdf Flipbook\, 3d Flipbook1
Pdf Viewer & 3d Pdf Flipbook – Dearpdf1
Social Media Share Buttons | Mashshare1
Dearhive CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-49047Medium4.32026-05-27Missing Authorization vulnerability in DearHive DearFlip allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects DearFlip…
CVE-2026-2569Medium6.42026-03-11The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PDF page labels in a…
CVE-2025-5314Medium6.12025-07-01The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to DOM-Based Reflected Cross-Site Scripting via the ‘pd…
CVE-2024-11830Medium6.42025-01-08The PDF Flipbook, 3D Flipbook—DearFlip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via outline settings in all versions up to 2.3.52 due…
CVE-2025-22319Medium4.32025-01-07Missing Authorization vulnerability in DearHive Social Media Share Buttons | MashShare.This issue affects Social Media Share Buttons | MashShare: from n/a thro…
CVE-2024-8717Medium6.12024-10-24The PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer – DearFlip plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'pdf_source' param…
CVE-2024-29807Medium6.52024-03-27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DearHive DearFlip allows Stored XSS.This issue affects De…
CVE-2024-0895Medium5.42024-02-03The PDF Flipbook, 3D Flipbook – DearFlip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via outline settings in all versions up to, and incl…
CVE-2024-23505Medium6.52024-01-31Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DearHive PDF Viewer & 3D PDF Flipbook – DearPDF allows St…
CVE-2021-24732Medium5.42021-10-18The PDF Flipbook, 3D Flipbook WordPress – DearFlip WordPress plugin before 1.7.10 does not escape the class attribute of its shortcode before outputting it bac…