PricingCase studies Login Start trial
Plugin Icon

DearFlip

DearHive

Developer

2.4.30

Latest version

200,000

Installations

No date

Last updated

WordPress Plugin
Active VDP
Report vulnerability
    VulnerabilitiesSecurity PolicySecurity Contributors

Vulnerability history

0 present
9 patched
1 Mitigation rules
  • Broken Access Control vulnerability
    <= 2.4.29
    6 days ago
  • Authenticated (Author+) Stored Cross-Site Scripting via PDF Page Labels vulnerability
    <= 2.4.20
    10/03/2026
  • WordPress PDF Flipbook, 3D Flipbook - DearFlip plugin <= 2.2.26 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
    <= 2.2.26
    03/02/2026
  • DOM-Based Reflected Cross-Site Scripting via 'pdf-source' vulnerability
    <= 2.3.65
    01/07/2025
  • Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
    <= 2.3.52
    08/01/2025
  • Reflected Cross-Site Scripting vulnerability
    <= 2.3.32
    23/10/2024
  • Cross Site Scripting (XSS) vulnerability
    <= 2.2.55
    12/08/2024
  • Cross Site Scripting (XSS) vulnerability
    <= 2.2.26
    25/03/2024
  • Stored Cross-Site Scripting (XSS) vulnerability
    <= 1.7.9
    15/09/2021

Vulnerability mitigation

  • Pricing
  • Application security (SCA)
  • RapidMitigate New
  • Threat Intelligence (API)
  • VS Monarx
  • VS Imunify360
  • VS Wordfence
  • Documentation
  • Service status
  • Log in

Code security

  • Managed VDP New
  • Active VDP directory 1,202
  • Security auditing
  • Compliance (CRA) New
  • Log in New

Bug bounty

  • Bug bounty
  • Leaderboard
  • Guidelines
  • Learn New
  • Report
  • Discord
  • Log in New

Use cases

  • Web developers
  • Webhosts New
  • Software vendors
  • WordPress
  • WooCommerce

Resources

  • Partners
  • Vulnerability database
  • Whitepaper 2026 New
  • Articles
  • Case studies New
  • Webinars New
  • Vulnerability statistics

Patchstack

  • About
  • Careers
  • Merch store
  • Media kit
  • LinkedIn
  • Facebook
  • X
  • Report Vulnerability
© 2026 Patchstack
DPA
Privacy Policy
Accessibility
Terms & Conditions