Ninjateam Filebird – WordPress Media Library Folders & File Manager
7 CVEs affecting Ninjateam Filebird – WordPress Media Library Folders & File Manager. Latest disclosed: 2026-09-18. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-6986 | Medium | 6.5 | 2025-08-06 | The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to SQL Injection via the 'search' parameter in all versions up… |
CVE-2024-2345 | Medium | 6.4 | 2024-05-02 | The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the folder name parameter i… |
CVE-2024-0691 | Medium | 5.5 | 2024-02-05 | The FileBird plugin for WordPress is vulnerable to Stored Cross-Site Scripting via imported folder titles in all versions up to, and including, 5.5.8.1 due to… |
CVE-2026-15004 | Medium | 5.4 | 2026-09-18 | The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alt text in all versi… |
CVE-2024-2346 | Medium | 5.4 | 2024-05-02 | The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and… |
CVE-2025-12900 | Medium | 4.3 | 2025-12-15 | The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to missing authorization in all versions up to, and including… |
CVE-2025-11510 | Medium | 4.3 | 2025-10-18 | The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabili… |