CVE-2025-26977

Authorization Bypass Through User-Controlled Key vulnerability in Ninja Team Filebird filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through = 6.4.2.1...

CVE-2025-26977

Authorization Bypass Through User-Controlled Key vulnerability in Ninja Team Filebird allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Filebird: from n/a through 6.4.2.1...

CVE-2025-26977

CVE-2025-26977 affects FileBird (FileBird – WordPress Media Library Folders & File Manager) with Insecure Direct Object Reference as root cause. Affected versions include up to 6.4.2.1; authenticated agents (e.g., Author+) could exploit to access or manipulate objects due to improper access contr...

PT-2025-7875 · Ninja Team · Filebird

Name of the Vulnerable Software and Affected Versions: Ninja Team Filebird versions 6.4.2.1 and earlier Description: The issue is related to an Authorization Bypass Through User-Controlled Key, which can be exploited due to incorrectly configured access control security levels. Recommendations: F...

CVE-2023-25966 WordPress FileBird plugin <= 5.1.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ninja Team Filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through 5.1.4...

PT-2024-12084 · Ninja Team · Filebird

Name of the Vulnerable Software and Affected Versions: Ninja Team Filebird versions through 5.1.4 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions through 5.1.4,...

CVE-2024-53825

CVE-2024-53825 (WordPress FileBird Lite) : A Missing Authorization / Broken Access Control vulnerability affects the FileBird Lite plugin for WordPress (versions up to and including 6.3.2). Public sources in the Connected documents describe an incorrect access control configuration that could be ...

CVE-2024-37504

CVE-2024-37504 affects the FileBird Document Library WordPress plugin (versions up to 2.0.6). It enables Exposure of Sensitive Information to an Unauthorized Actor, i.e., information disclosure rather than code execution. The CVE entry notes medium severity (CVSS v3.1 score 5.3), with network att...