Login Request a demo
FI
Product
Filebird
by Ninjateam · last CVE Feb 25, 2025
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 1High 3Medium 4Low 0
Severity
All severities8Critical1High3Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Filebird to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-24385
9.8
3%
Jul 12
The Filebird Plugin 4.7.3 introduced a SQL injection vulnerability as it is making SQL queries without escaping user input data from a HTTP post request
Affected: 4.7.3
CVE-2024-35166
7.5
1%
May 13
WordPress FileBird – WordPress Media Library Folders & File Manager plugin <= 5.6.3 - Sensitive Data Exposure vulnerability
Affected: before 5.6.4
CVE-2025-26977
7.2
0%
Feb 25
WordPress FileBird plugin <= 6.4.2.1 - Insecure Direct Object References (IDOR) vulnerability
Affected: before 6.4.6
CVE-2024-53825
7.2
0%
Dec 6
WordPress FileBird Lite plugin <= 6.3.2 - Broken Access Control vulnerability
Affected: through 6.3.2
CVE-2023-25966
6.5
1%
Dec 9
WordPress FileBird plugin <= 5.1.4 - Broken Access Control vulnerability
Affected: before 5.1.5
CVE-2024-2346
5.4
0%
May 2
FileBird – WordPress Media Library Folders & File Manager <= 5.6.3 - Authenticated (Author+) Insecure Direct Object Reference
Affected: before 5.6.4
CVE-2024-2345
5.4
0%
May 2
FileBird – WordPress Media Library Folders & File Manager <= 5.6.3 - Authenticated (Author+) Stored Cross-Site Scripting
Affected: before 5.6.4
CVE-2024-0691
4.8
0%
Feb 5
FileBird <= 5.6.0 - Authenticated(Administrator+) Stored Cross-Site Scripting via Folder Import
Affected: through 5.5.8.1
Showing 8