Plugin icon

DearFlip – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer

3d-flipbook-dflip-lite

Vulnerabilities:

8

Last Updated:

June 2, 2026

Active Installs:

200000

Published
Title
Fixed in
CVSS
Published
2026-05-27
Title
DearFlip – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer < 2.4.30 - Missing Authorization
Fixed in
Fixed in 2.4.30
CVSS
4.3 (medium)
Published
2026-03-10
Title
Dear Flipbook < 2.4.27 - Authenticated (Auhtor+) Stored Cross-Site Scripting via PDF Page Labels
Fixed in
Fixed in 2.4.27
CVSS
6.4 (medium)
Published
2025-06-30
Title
Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer < 2.3.67 - DOM-Based Reflected Cross-Site Scripting via 'pdf-source'
Fixed in
Fixed in 2.3.67
CVSS
6.1 (medium)
Published
2025-01-07
Title
Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer < 2.3.53 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.3.53
CVSS
6.4 (medium)
Published
2024-10-23
Title
PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer – DearFlip < 2.3.42 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.3.42
CVSS
6.1 (medium)
Published
2024-03-25
Title
DearFlip < 2.2.27 - Contributor+ Stored XSS
Fixed in
Fixed in 2.2.27
CVSS
5.9 (medium)
Published
2024-02-02
Title
DearFlip < 2.2.27 - Contributor+ Stored XSS
Fixed in
Fixed in 2.2.27
CVSS
5.9 (medium)
Published
2021-09-15
Title
Dflip Lite < 1.7.10 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 1.7.10
CVSS
6.8 (medium)