Read the docs

ninjateam

Records59All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9

Exploited now

ninjateam records in CISA KEV

No ninjateam vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Filebird 8 records MEDIUM Filester 7 records HIGH Wp Chat App 6 records MEDIUM Click To Chat 2 records LOW Fastdup 2 records MEDIUM Gdpr Ccpa Compliance & Cookie Consent Banner 2 records LOW Header Footer Custom Code 2 records MEDIUM Video Downloader For Tiktok 2 records MEDIUM

Records

8 records in Filebird · all components

TI-2021-06677 CVE-2021-24385 · GHSA-6cg2-rr5h-x9hh

Filebird 4.7.3 - Unauthenticated SQL Injection

Priority MEDIUM 47

The Filebird Plugin 4.7.3 introduced a SQL injection vulnerability as it is making SQL queries without escaping user input data from a HTTP post request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02848 Published 2021-07-12 Fixed in 4.7.4 CWE-89
TI-2024-23241 CVE-2024-35166 · GHSA-9g46-vg36-jfrh

Information disclosure in ninjateam Filebird

Priority MEDIUM 40

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team Filebird.This issue affects Filebird: from n/a through 5.6.3.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00575 Published 2024-05-13 No fix listed CWE-200
TI-2025-19848 CVE-2025-26977 · GHSA-hwmc-7532-hg76

WordPress FileBird plugin <= 6.4.2.1 - Insecure Direct Object References (IDOR) vulnerability

Priority LOW 32

Authorization Bypass Through User-Controlled Key vulnerability in Ninja Team Filebird filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through <= 6.4.…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00413 Published 2025-02-25 No fix listed CWE-639
TI-2024-36023 CVE-2024-53825 · GHSA-r97p-4233-hch5

WordPress FileBird Lite plugin <= 6.3.2 - Broken Access Control vulnerability

Priority LOW 32

Missing Authorization vulnerability in Ninja Team Filebird filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through <= 6.3.2.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00364 Published 2024-12-06 No fix listed CWE-862
TI-2023-11211 CVE-2023-25966 · GHSA-8wv9-79mg-hgfg

WordPress FileBird plugin <= 5.1.4 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in Ninja Team Filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through 5.1.4.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00649 Published 2024-12-09 No fix listed CWE-862
TI-2024-02180 CVE-2024-2345 · GHSA-3frr-3wq5-gphc

FileBird – WordPress Media Library Folders & File Manager <= 5.6.3 - Authenticated (Author+) Stored Cross-Site Scripting

Priority LOW 28

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the folder name parameter in all versions up to, and including, 5.6.3 due to insufficien…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00343 Published 2024-05-02 No fix listed CWE-79
TI-2024-02181 CVE-2024-2346 · GHSA-92qm-mq2f-95w2

Authorization bypass in ninjateam FileBird – WordPress Media Library Folders & File…

Priority LOW 24

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.6.3 via folder deletion due to missing validati…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00308 Published 2024-05-02 No fix listed CWE-639
Open these records in search →