tipsen

3 credited records · 3 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
25Monitor	CVE-2026-8625No exploit	Dear Flipbook <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via '.df-element' Element Inner HTMLdearhive · dearflip – pdf flipbook, 3d flipbook, pdf embed, pdf viewer · CWE-79 XSS	Medium6.4	—	0.4%	Sep 5, 2026
25Monitor	CVE-2026-8623No exploit	Dear Flipbook <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via '.dvcss' Element Class Attributedearhive · dearflip – pdf flipbook, 3d flipbook, pdf embed, pdf viewer · CWE-79 XSS	Medium6.4	—	0.3%	Sep 5, 2026
28Monitor	CVE-2026-15780No exploit	WP Statistics <= 14.16.8 - Unauthenticated Stored Cross-Site Scripting via 'utm_campaign' Parameterveronalabs · wp statistics – simple, privacy-friendly google analytics alternative · CWE-79 Pre-auth Auth bypass XSS	High7.2	—	0.6%	Aug 19, 2026

CVE-2026-8625
25Monitor
Dear Flipbook <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via '.df-element' Element Inner HTML
MediumCVSS 6.4No exploitEPSS 0%
- XSS
dearhive · dearflip – pdf flipbook, 3d flipbook, pdf embed, pdf viewerSep 5, 2026
CVE-2026-8623
25Monitor
Dear Flipbook <= 2.4.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via '.dvcss' Element Class Attribute
MediumCVSS 6.4No exploitEPSS 0%
- XSS
dearhive · dearflip – pdf flipbook, 3d flipbook, pdf embed, pdf viewerSep 5, 2026
CVE-2026-15780
28Monitor
WP Statistics <= 14.16.8 - Unauthenticated Stored Cross-Site Scripting via 'utm_campaign' Parameter
HighCVSS 7.2No exploitEPSS 1%
veronalabs · wp statistics – simple, privacy-friendly google analytics alternativeAug 19, 2026