Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: ninjateam Component: Filebird Clear all filters
TI-2025-19848 CVE-2025-26977 · GHSA-hwmc-7532-hg76

WordPress FileBird plugin <= 6.4.2.1 - Insecure Direct Object References (IDOR) vulnerability

Priority LOW 32

Authorization Bypass Through User-Controlled Key vulnerability in Ninja Team Filebird filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through <= 6.4.…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00413 Published 2025-02-25 No fix listed CWE-639
TI-2023-11211 CVE-2023-25966 · GHSA-8wv9-79mg-hgfg

WordPress FileBird plugin <= 5.1.4 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in Ninja Team Filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through 5.1.4.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00649 Published 2024-12-09 No fix listed CWE-862
TI-2024-36023 CVE-2024-53825 · GHSA-r97p-4233-hch5

WordPress FileBird Lite plugin <= 6.3.2 - Broken Access Control vulnerability

Priority LOW 32

Missing Authorization vulnerability in Ninja Team Filebird filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through <= 6.3.2.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00364 Published 2024-12-06 No fix listed CWE-862
TI-2024-23241 CVE-2024-35166 · GHSA-9g46-vg36-jfrh

Information disclosure in ninjateam Filebird

Priority MEDIUM 40

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team Filebird.This issue affects Filebird: from n/a through 5.6.3.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00575 Published 2024-05-13 No fix listed CWE-200
TI-2024-02181 CVE-2024-2346 · GHSA-92qm-mq2f-95w2

Authorization bypass in ninjateam FileBird – WordPress Media Library Folders & File…

Priority LOW 24

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.6.3 via folder deletion due to missing validati…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00308 Published 2024-05-02 No fix listed CWE-639
TI-2024-02180 CVE-2024-2345 · GHSA-3frr-3wq5-gphc

FileBird – WordPress Media Library Folders & File Manager <= 5.6.3 - Authenticated (Author+) Stored Cross-Site Scripting

Priority LOW 28

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the folder name parameter in all versions up to, and including, 5.6.3 due to insufficien…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00343 Published 2024-05-02 No fix listed CWE-79
TI-2021-06677 CVE-2021-24385 · GHSA-6cg2-rr5h-x9hh

Filebird 4.7.3 - Unauthenticated SQL Injection

Priority MEDIUM 47

The Filebird Plugin 4.7.3 introduced a SQL injection vulnerability as it is making SQL queries without escaping user input data from a HTTP post request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02848 Published 2021-07-12 Fixed in 4.7.4 CWE-89