CVE-2025-5314

🗓️ 01 Jul 2025 11:27:12Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 20 Views

Dear Flipbook plugin for WordPress is vulnerable to DOM-Based Reflected Cross-Site Scripting via pdf-source

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2025-5314	1 Jul 202512:10	–	circl
CNNVD	WordPress plugin Dear Flipbook 跨站脚本漏洞	1 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-5314 Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer <= 2.3.65 - DOM-Based Reflected Cross-Site Scripting via 'pdf-source'	1 Jul 202511:27	–	cvelist
EUVD	EUVD-2025-19618	3 Oct 202520:07	–	euvd
NVD	CVE-2025-5314	1 Jul 202512:15	–	nvd
Patchstack	WordPress DearFlip plugin <= 2.3.65 - DOM-Based Reflected Cross-Site Scripting via 'pdf-source' vulnerability	1 Jul 202521:30	–	patchstack
Positive Technologies	PT-2025-27522 · WordPress · The Dear Flipbook – Pdf Flipbook	1 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-5314	3 Jul 202512:22	–	redhatcve
Vulnrichment	CVE-2025-5314 Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer <= 2.3.65 - DOM-Based Reflected Cross-Site Scripting via 'pdf-source'	1 Jul 202511:27	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (June 30, 2025 to July 6, 2025)	10 Jul 202513:55	–	wordfence

Vulners

Node

dearhive dear_flipbook_pdf_flipbook,_3d_flipbook,_pdf_embed,_pdf_viewerRange≤2.3.65wordpress

[
  {
    "vendor": "dearhive",
    "product": "Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "2.3.65",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/3d-flipbook-dflip-lite/trunk/assets/js/dflip.js
plugins	www.plugins.trac.wordpress.org/browser/3d-flipbook-dflip-lite/trunk/assets/js/libs/pdf.min.js
plugins	www.plugins.trac.wordpress.org/changeset/3319013/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/e316c636-2dd7-4d50-8c99-36f08ecf03ad
plugins	www.plugins.trac.wordpress.org/browser/3d-flipbook-dflip-lite/trunk/assets/js/dflip.min.js

15 Apr 2026 00:35Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.16.1

EPSS0.00736

SSVC

CWE-79