FileBird – WordPress Media Library Folders & File Manager vulnerabilities

Product

FileBird – WordPress Media Library Folders & File Manager

by ninjateam · last CVE Sep 18, 2026

CVEs

On KEV

6.5

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 7Low 0

Severity

Exploitation

Watch

Add FileBird – WordPress Media Library Folders & File Manager to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-6986	6.5	0%	Aug 6	FileBird – WordPress Media Library Folders & File Manager <= 6.4.8 - Authenticated (Author+) SQL Injection Affected: through 6.4.8
CVE-2026-15004	5.4	0%	Sep 18	FileBird – WordPress Media Library Folders & File Manager <= 6.5.6 - Authenticated (Author+) Stored Cross-Site Scripting Affected: through 6.5.6
CVE-2024-2346	5.4	0%	May 2	FileBird – WordPress Media Library Folders & File Manager <= 5.6.3 - Authenticated (Author+) Insecure Direct Object Reference Affected: through 5.6.3
CVE-2024-2345	5.4	0%	May 2	FileBird – WordPress Media Library Folders & File Manager <= 5.6.3 - Authenticated (Author+) Stored Cross-Site Scripting Affected: through 5.6.3
CVE-2024-0691	4.8	0%	Feb 5	FileBird <= 5.6.0 - Authenticated(Administrator+) Stored Cross-Site Scripting via Folder Import Affected: through 5.6.0
CVE-2025-12900	4.3	0%	Dec 15	FileBird – WordPress Media Library Folders & File Manager <= 6.5.1 - Missing Authorization to Authenticated (Author+) Global Folders Tampering Affected: through 6.5.1
CVE-2025-11510	4.3	0%	Oct 18	FileBird <= 6.4.9 - Improper Authorization to Authenticated (Author+) Settings Reset Affected: through 6.4.9