Ninjateam Filebird vulnerabilities

• ninjateam filebird – wordpress media library folders & file manager FileBird – WordPress Media Library Folders & File Manager <= 6.5.6 - Authenticated (Author+) Stored Cross-Site Scripting CVE-2026-15004 5.4 MediumSeptember 18, 2026
• ninjateam filebird pro WordPress FileBird Pro plugin <= 6.5.1 - Broken Access Control vulnerability CVE-2025-66134 5.4 MediumDecember 16, 2025
• ninjateam filebird – wordpress media library folders & file manager FileBird – WordPress Media Library Folders & File Manager <= 6.5.1 - Missing Authorization to Authenticated (Author+) Global Folders Tampering CVE-2025-12900 4.3 MediumDecember 15, 2025
• ninjateam filebird – wordpress media library folders & file manager FileBird <= 6.4.9 - Improper Authorization to Authenticated (Author+) Settings Reset CVE-2025-11510 4.3 MediumOctober 18, 2025
• ninjateam filebird – wordpress media library folders & file manager FileBird – WordPress Media Library Folders & File Manager <= 6.4.8 - Authenticated (Author+) SQL Injection CVE-2025-6986 6.5 MediumAugust 6, 2025
• ninja team filebird WordPress FileBird plugin <= 6.4.2.1 - Insecure Direct Object References (IDOR) vulnerability CVE-2025-26977 3.8 LowFebruary 25, 2025
• ninja team filebird WordPress FileBird plugin <= 5.1.4 - Broken Access Control vulnerability CVE-2023-25966 5.5 MediumDecember 9, 2024
• ninja team filebird WordPress FileBird Lite plugin <= 6.3.2 - Broken Access Control vulnerability CVE-2024-53825 4.7 MediumDecember 6, 2024
• ninja team filebird document library WordPress FileBird Document Library plugin <= 2.0.6 - Sensitive Data Exposure vulnerability CVE-2024-37504 5.3 MediumJuly 10, 2024
• ninja team filebird, firebirdsql firebird +1 more WordPress FileBird – WordPress Media Library Folders & File Manager plugin <= 5.6.3 - Sensitive Data Exposure vulnerability CVE-2024-35166 5.3 MediumMay 13, 2024
• ninjateam filebird, filebird – wordpress media library folders & file manager +1 more FileBird – WordPress Media Library Folders & File Manager <= 5.6.3 - Authenticated (Author+) Insecure Direct Object Reference CVE-2024-2346 5.4 MediumMay 2, 2024
• ninjateam filebird, filebird – wordpress media library folders & file manager +1 more FileBird – WordPress Media Library Folders & File Manager <= 5.6.3 - Authenticated (Author+) Stored Cross-Site Scripting CVE-2024-2345 6.4 MediumMay 2, 2024
• ninjateam filebird, filebird – wordpress media library folders & file manager +1 more FileBird <= 5.6.0 - Authenticated(Administrator+) Stored Cross-Site Scripting via Folder Import CVE-2024-0691 5.5 MediumFebruary 5, 2024
• ninjateam filebird, ninja team filebird – wordpress media library folders & file manager +1 more Filebird 4.7.3 - Unauthenticated SQL Injection CVE-2021-24385 9.8 CriticalJuly 12, 2021