Lucene search
+L

169 matches found

NVD
NVD
•added 2026/09/18 8:16 a.m.•16 views

CVE-2026-15004

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alt text in all versions up to, and including, 6.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

5.4CVSS0.00243EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/18 7:40 a.m.•41 views

CVE-2026-15004 FileBird – WordPress Media Library Folders & File Manager <= 6.5.6 - Authenticated (Author+) Stored Cross-Site Scripting

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alt text in all versions up to, and including, 6.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

5.4CVSS0.00243EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/18 7:40 a.m.•13 views

CVE-2026-15004 FileBird – WordPress Media Library Folders & File Manager <= 6.5.6 - Authenticated (Author+) Stored Cross-Site Scripting

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alt text in all versions up to, and including, 6.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

5.4CVSS5.9AI score0.00243EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/18 7:40 a.m.•34 views

CVE-2026-15004

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) via image alt text in all versions up to and including 6.5.6 . The root cause is insufficient input sanitization and output escaping . An attacker with Author-leve...

5.4CVSS5.9AI score0.00243EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/18 7:40 a.m.•12 views

EUVD-2026-82757

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alt text in all versions up to, and including, 6.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

5.4CVSS5.9AI score0.00243EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•2 views

CVE-2026-15004: Improper Neutralization of Input During Web Page Generation

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alt text in all versions up to, and including, 6.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

5.4CVSS5.9AI score0.00243EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/09/17 7:13 p.m.•11 views

WordPress FileBird – WordPress Media Library Folders & File Manager plugin <= 6.5.6 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by TruongLV1 From FPT Night Wolf in WordPress Plugin Filebird versions = 6.5.6...

5.4CVSS5.8AI score0.00243EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:32 a.m.•20 views

CVE-2023-25966

Missing Authorization vulnerability in Ninja Team Filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through 5.1.4...

6.5CVSS8.6AI score0.00649EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:14 a.m.•26 views

CVE-2024-2345

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the folder name parameter in all versions up to, and including, 5.6.3 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS5.8AI score0.00343EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/12/22 12:00 a.m.•11 views

WordPress FileBird Pro plugin missing authorization vulnerability

WordPress FileBird Pro plugin is a media library management plugin for WordPress websites designed to help users organize and manipulate media files more efficiently. A missing authorization vulnerability exists in WordPress FileBird Pro plugin, which can be exploited by an attacker to leverage a...

5.4CVSS6.8AI score0.00248EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/12/22 12:00 a.m.•17 views

WordPress Filebird Plugin Missing Authorization Vulnerability

WordPress Filebird Plugin is a media library management plugin for WordPress that allows users to organize media files by creating folders and subfolders to improve the efficiency of media library management. WordPress Filebird Plugin suffers from a missing authorization vulnerability, which can ...

4.3CVSS7.2AI score0.00234EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/17 10:02 a.m.•11 views

CVE-2025-66134

Missing Authorization vulnerability in NinjaTeam FileBird Pro filebird-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FileBird Pro: from n/a through = 6.5.1...

5.4CVSS5.9AI score0.00248EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/16 2:49 p.m.•14 views

CVE-2025-12900

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to missing authorization in all versions up to, and including, 6.5.1 via the "ConvertController::insertToNewTable" function due to missing validation on a user controlled key. This makes it possible f...

4.3CVSS5.8AI score0.00234EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/16 9:31 a.m.•7 views

EUVD-2025-203576

Missing Authorization vulnerability in NinjaTeam FileBird Pro filebird-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FileBird Pro: from n/a through = 6.4.9...

5.4CVSS6.5AI score0.00248EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/16 9:15 a.m.•7 views

CVE-2025-66134

Missing Authorization vulnerability in NinjaTeam FileBird Pro filebird-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FileBird Pro: from n/a through = 6.5.1...

5.4CVSS0.00248EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/16 8:12 a.m.•35 views

CVE-2025-66134 WordPress FileBird Pro plugin <= 6.5.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in NinjaTeam FileBird Pro filebird-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FileBird Pro: from n/a through = 6.5.1...

5.4CVSS0.00248EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/16 8:12 a.m.•17 views

CVE-2025-66134

CVE-2025-66134 concerns the WordPress plugin NinjaTeam FileBird Pro (FileBird Pro) with versions up to and including 6.4.9. The connected sources describe a missing/incorrectly configured authorization mechanism (broken access control) that permits exploitation through misconfigured access contro...

5.4CVSS5.9AI score0.00248EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/16 8:12 a.m.•4 views

CVE-2025-66134 WordPress FileBird Pro plugin <= 6.5.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in NinjaTeam FileBird Pro filebird-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FileBird Pro: from n/a through = 6.5.1...

5.4CVSS5.1AI score0.00248EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/16 12:00 a.m.•10 views

WordPress plugin FileBird Pro 安全漏洞

WordPress FileBird Pro plugin is a media library management plugin for WordPress websites designed to help users organize and manipulate media files more efficiently. A missing authorization vulnerability exists in WordPress FileBird Pro plugin, which can be exploited by an attacker to leverage a...

5.4CVSS6.7AI score0.00248EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•1 views

CVE-2025-66134: Missing Authorization

Missing Authorization vulnerability in NinjaTeam FileBird Pro filebird-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FileBird Pro: from n/a through = 6.5.1...

5.4CVSS5.9AI score0.00248EPSS
SaveExploits0References1
Rows per page
Query Builder