Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
NinjateamFilebird

8 matches found

CVE
CVE•added 2024/05/02 5:15 p.m.•77 views

CVE-2024-2346

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.6.3 via folder deletion due to missing validation on a user controlled key. This makes it possible for authenticated attackers...

5.4CVSS6.4AI score0.00074EPSS
CVE
CVE•added 2024/02/05 10:16 p.m.•72 views

CVE-2024-0691

The FileBird plugin for WordPress is vulnerable to Stored Cross-Site Scripting via imported folder titles in all versions up to, and including, 5.5.8.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator access, to injec...

5.5CVSS5.3AI score0.00224EPSS
CVE
CVE•added 2024/05/02 5:15 p.m.•58 views

CVE-2024-2345

The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the folder name parameter in all versions up to, and including, 5.6.3 due to insufficient input sanitization and output escaping. This makes it possible for authentica...

6.4CVSS5.8AI score0.00124EPSS
CVE
CVE•added 2025/02/25 3:15 p.m.•55 views

CVE-2025-26977

Authorization Bypass Through User-Controlled Key vulnerability in Ninja Team Filebird allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Filebird: from n/a through 6.4.2.1.

7.2CVSS7AI score0.00057EPSS
CVE
CVE•added 2024/05/14 3:39 p.m.•45 views

CVE-2024-35166

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team Filebird.This issue affects Filebird: from n/a through 5.6.3.

7.5CVSS6.8AI score0.00304EPSS
CVE
CVE•added 2024/12/06 2:15 p.m.•45 views

CVE-2024-53825

Missing Authorization vulnerability in Ninja Team Filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through 6.3.2.

7.2CVSS4.9AI score0.00151EPSS
CVE
CVE•added 2021/07/12 8:15 p.m.•40 views

CVE-2021-24385

The Filebird Plugin 4.7.3 introduced a SQL injection vulnerability as it is making SQL queries without escaping user input data from a HTTP post request. This is a major vulnerability as the user input is not escaped and passed directly to the get_col function and it allows SQL injection. The Rest ...

9.8CVSS9.9AI score0.09019EPSS
CVE
CVE•added 2024/12/09 1:15 p.m.•32 views

CVE-2023-25966

Missing Authorization vulnerability in Ninja Team Filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through 5.1.4.

6.5CVSS5.5AI score0.00175EPSS