Skip to content
OpenAdvisories

Product · DearHive

DearFlip

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-49047

    WordPress DearFlip plugin <= 2.4.27 - Broken Access Control vulnerability

    Missing Authorization vulnerability in DearHive DearFlip allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects DearFlip: from n/a through 2.4.27.

    DearHive DearFlip
  • Medium 6.5
    CVE-2024-29807

    WordPress DearFlip plugin <= 2.2.26 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DearHive DearFlip allows Stored XSS.This issue affects DearFlip: from n/a through 2.2.26.

    DearHive DearFlip