What’s Vulnerable › Products
ninjateam FileBird – WordPress Media Library Folders & File Manager vulnerabilities
12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.
Latest ninjateam FileBird – WordPress Media Library Folders & File Manager vulnerabilities
- CVE-2026-15004 — FileBird – WordPress Media Library Folders & File Manager <= 6.5.6 - Authenticated (Author+) Stored Cross-Site Scripting (CVSS 5.4)
- CVE-2025-12900 — FileBird – WordPress Media Library Folders & File Manager <= 6.5.1 - Missing Authorization to Authenticated (Author+) Global Folders Tampering (CVSS 4.3)
- CVE-2025-11510 — FileBird <= 6.4.9 - Improper Authorization to Authenticated (Author+) Settings Reset (CVSS 4.3)
- CVE-2025-6986 — FileBird – WordPress Media Library Folders & File Manager <= 6.4.8 - Authenticated (Author+) SQL Injection (CVSS 6.5)
- CVE-2025-26977 — WordPress FileBird plugin <= 6.4.2.1 - Insecure Direct Object References (IDOR) vulnerability (CVSS 7.2)
- CVE-2023-25966 — WordPress FileBird plugin <= 5.1.4 - Broken Access Control vulnerability (CVSS 6.5)
- CVE-2024-53825 — WordPress FileBird Lite plugin <= 6.3.2 - Broken Access Control vulnerability (CVSS 7.2)
- CVE-2024-35166 — WordPress FileBird – WordPress Media Library Folders & File Manager plugin <= 5.6.3 - Sensitive Data Exposure vulnerability (CVSS 7.5)
- CVE-2024-2346 — FileBird – WordPress Media Library Folders & File Manager <= 5.6.3 - Authenticated (Author+) Insecure Direct Object Reference (CVSS 5.4)
- CVE-2024-2345 — FileBird – WordPress Media Library Folders & File Manager <= 5.6.3 - Authenticated (Author+) Stored Cross-Site Scripting (CVSS 5.4)
- CVE-2024-0691 — FileBird <= 5.6.0 - Authenticated(Administrator+) Stored Cross-Site Scripting via Folder Import (CVSS 4.8)
- CVE-2021-24385 — Filebird 4.7.3 - Unauthenticated SQL Injection (CVSS 9.8)