Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
filebird
WordPress
· Plugin
11 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
FileBird – WordPress Media Library Folders & File Manager <= 6.5.6 - Authenticated (Author+) Stored Cross-Site Scripting
CVE-2026-15004
filebird
WordPress
Medium
Fix reported
2026-09-18
FileBird – WordPress Media Library Folders & File Manager <= 6.5.1 - Missing Authorization to Authenticated (Author+) Global Folders Tampering
CVE-2025-12900
filebird
WordPress
Medium
Fix reported
2025-12-15
FileBird <= 6.4.9 - Improper Authorization to Authenticated (Author+) Settings Reset
CVE-2025-11510
filebird
WordPress
Medium
Fix reported
2025-10-18
FileBird – WordPress Media Library Folders & File Manager <= 6.4.8 - Authenticated (Author+) SQL Injection
CVE-2025-6986
filebird
WordPress
Medium
Fix reported
2025-08-06
Filebird <= 6.4.2.1 - Authenticated (Author+) Insecure Direct Object Reference
CVE-2025-26977
filebird
WordPress
Medium
Fix reported
2025-03-03
Filebird <= 6.3.2 - Missing Authorization
CVE-2024-53825
filebird
WordPress
Medium
Fix reported
2024-12-11
FileBird <= 5.6.0 - Authenticated(Administrator+) Stored Cross-Site Scripting via Folder Import
CVE-2024-0691
filebird
WordPress
Medium
Fix reported
2024-07-30
FileBird – WordPress Media Library Folders & File Manager <= 5.6.3 - Authenticated (Author+) Stored Cross-Site Scripting
CVE-2024-2345
filebird
WordPress
Medium
Fix reported
2024-05-31
FileBird – WordPress Media Library Folders & File Manager <= 5.6.3 - Authenticated (Author+) Insecure Direct Object Reference
CVE-2024-2346
filebird
WordPress
Medium
Fix reported
2024-05-16
Filebird <= 5.1.4 - Missing Authorization via resAdminPermissionsCheck
CVE-2023-25966
filebird
WordPress
Medium
Fix reported
2024-01-22
Filebird 4.7.3 - Unauthenticated SQL Injection
CVE-2021-24385
filebird
WordPress
Critical
Fix reported
2024-01-22