Skip to main content

Vendor/product archive

ninjateam / filebird CVEs

Beta · best-effort

8 CVEs tagged to ninjateam / filebird1 Critical, 0 High, 6 Medium, 1 Low, 0 Unrated.

CVE-2025-26977

Published Feb 25, 2025

Authorization Bypass Through User-Controlled Key vulnerability in Ninja Team Filebird filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a…

CVSS 3.8 · Low
Vendor/product tagsBeta · best-effort

CVE-2023-25966

Published Dec 9, 2024

Missing Authorization vulnerability in Ninja Team Filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through 5.…

CVSS 5.5 · Medium
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort

CVE-2024-53825

Published Dec 6, 2024

Missing Authorization vulnerability in Ninja Team Filebird filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a t…

CVSS 4.7 · Medium
Vendor/product tagsBeta · best-effort

CVE-2024-35166

Published May 14, 2024

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team Filebird.This issue affects Filebird: from n/a through 5.6.3.

CVSS 5.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2024-2346

Published May 2, 2024

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.6.3 vi…

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2024-2345

Published May 2, 2024

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the folder name parameter in all versions up to…

CVSS 6.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2024-0691

Published Feb 5, 2024

The FileBird plugin for WordPress is vulnerable to Stored Cross-Site Scripting via imported folder titles in all versions up to, and including, 5.5.8.1 due to insufficient input s…

CVSS 5.5 · Medium
evidence mentions
1
Buzz score
11.9
Vendor/product tagsBeta · best-effort

CVE-2021-24385

Published Jul 12, 2021

The Filebird Plugin 4.7.3 introduced a SQL injection vulnerability as it is making SQL queries without escaping user input data from a HTTP post request. This is a major vulnerabi…

CVSS 9.8 · Critical
Vendor/product tagsBeta · best-effort
Showing 1-8 of 8 CVEsPage 1 of 1