Lucene search
+L

13 matches found

RedhatCVE
RedhatCVE
•added 2025/12/16 2:49 p.m.•23 views

CVE-2025-12900

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to missing authorization in all versions up to, and including, 6.5.1 via the "ConvertController::insertToNewTable" function due to missing validation on a user controlled key. This makes it possible f...

4.3CVSS5.9AI score0.00234EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2025-5415

Malicious code in bioql PyPI...

7.2CVSS8.6AI score0.00413EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2025-23730

Malicious code in bioql PyPI...

6.5CVSS4.5AI score0.00415EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/08/06 1:45 a.m.•29 views

CVE-2025-6986 FileBird – WordPress Media Library Folders & File Manager <= 6.4.8 - Authenticated (Author+) SQL Injection

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to SQL Injection via the 'search' parameter in all versions up to, and including, 6.4.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing S...

6.5CVSS0.00415EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/23 8:41 a.m.•24 views

CVE-2024-35166

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team Filebird.This issue affects Filebird: from n/a through 5.6.3...

7.5CVSS5.9AI score0.00575EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 7:57 a.m.•25 views

CVE-2024-2346

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.6.3 via folder deletion due to missing validation on a user controlled key. This makes it possible for authenticated...

5.4CVSS5.7AI score0.00308EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/02/25 3:15 p.m.•24 views

CVE-2025-26977

Authorization Bypass Through User-Controlled Key vulnerability in Ninja Team Filebird allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Filebird: from n/a through 6.4.2.1...

7.2CVSS8.5AI score0.00413EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/25 12:00 a.m.•17 views

WordPress plugin Filebird has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.2CVSS8.3AI score0.00413EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/12/09 1:15 p.m.•24 views

CVE-2023-25966

Missing Authorization vulnerability in Ninja Team Filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through 5.1.4...

6.5CVSS8.6AI score0.00649EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/09 11:31 a.m.•25 views

CVE-2023-25966 WordPress FileBird plugin <= 5.1.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ninja Team Filebird filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through = 5.1.4...

5.5CVSS8.6AI score0.00649EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/06 1:07 p.m.•43 views

CVE-2024-53825 WordPress FileBird Lite plugin <= 6.3.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ninja Team Filebird filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through = 6.3.2...

4.7CVSS0.00364EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/05/14 3:39 p.m.•22 views

CVE-2024-35166

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team Filebird.This issue affects Filebird: from n/a through 5.6.3...

7.5CVSS5.8AI score0.00575EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/14 12:00 a.m.•21 views

WordPress plugin Filebird has a vulnerability related to information leakage

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

7.5CVSS5.7AI score0.00575EPSS
SaveExploits0References3
Rows per page
Query Builder