Lucene search
K

13 matches found

RedhatCVE
RedhatCVE
added 2025/12/16 2:49 p.m.1 views

CVE-2025-12900

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to missing authorization in all versions up to, and including, 6.5.1 via the "ConvertController::insertToNewTable" function due to missing validation on a user controlled key. This makes it possible f...

4.3CVSS5.8AI score0.00036EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-5415

Malicious code in bioql PyPI...

7.2CVSS9.1AI score0.00035EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-23730

Malicious code in bioql PyPI...

6.5CVSS4.5AI score0.00148EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/08/06 1:45 a.m.5 views

CVE-2025-6986 FileBird – WordPress Media Library Folders & File Manager <= 6.4.8 - Authenticated (Author+) SQL Injection

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to SQL Injection via the 'search' parameter in all versions up to, and including, 6.4.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing S...

6.5CVSS0.00148EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 8:41 a.m.4 views

CVE-2024-35166

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team Filebird.This issue affects Filebird: from n/a through 5.6.3...

7.5CVSS5.2AI score0.00304EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:57 a.m.5 views

CVE-2024-2346

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.6.3 via folder deletion due to missing validation on a user controlled key. This makes it possible for authenticated...

5.4CVSS5.8AI score0.001EPSS
Exploits0References1
OSV
OSV
added 2025/02/25 3:15 p.m.1 views

CVE-2025-26977

Authorization Bypass Through User-Controlled Key vulnerability in Ninja Team Filebird allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Filebird: from n/a through 6.4.2.1...

7.2CVSS7.3AI score0.00035EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/25 12:0 a.m.1 views

WordPress plugin Filebird 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.2CVSS8.6AI score0.00035EPSS
Exploits0References2
OSV
OSV
added 2024/12/09 1:15 p.m.1 views

CVE-2023-25966

Missing Authorization vulnerability in Ninja Team Filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through 5.1.4...

6.5CVSS5.8AI score0.00296EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/09 11:31 a.m.9 views

CVE-2023-25966 WordPress FileBird plugin <= 5.1.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ninja Team Filebird filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through = 5.1.4...

5.5CVSS7.3AI score0.00296EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/06 1:7 p.m.23 views

CVE-2024-53825 WordPress FileBird Lite plugin <= 6.3.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ninja Team Filebird filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through = 6.3.2...

4.7CVSS0.00245EPSS
Exploits0References1
OSV
OSV
added 2024/05/14 3:39 p.m.2 views

CVE-2024-35166

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team Filebird.This issue affects Filebird: from n/a through 5.6.3...

7.5CVSS5.8AI score
Exploits0References1
CNNVD
CNNVD
added 2024/05/14 12:0 a.m.2 views

WordPress plugin Filebird 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

7.5CVSS6.2AI score0.00304EPSS
Exploits0References3
Rows per page
Query Builder