Extension WordPress
Vulnérabilités FileBird – WordPress Media Library Folders & File Manager
Cette page rassemble les failles publiées pour FileBird – WordPress Media Library Folders & File Manager, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de FileBird – WordPress Media Library Folders & File Manager
10 fiches
FileBird – WordPress Media Library Folders & File Manager <= 6.5.1 – Missing Authorization to Authenticated (Author+) Global Folders Tampering
The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to missing authorization in all versions up to, and including, 6.5.1 via the "ConvertController::insertToNewTable" function due to missing validation on a user controlled…
*-6.5.1
6.5.2
15/12/2025
FileBird <= 6.4.9 – Improper Authorization to Authenticated (Author+) Settings Reset
The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /filebird/v1/fb-wipe-clear-all-data function in all versions up to, and including, 6.4.9.…
*-6.4.9
6.5.0
17/10/2025
FileBird – WordPress Media Library Folders & File Manager <= 6.4.8 – Authenticated (Author+) SQL Injection
The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to SQL Injection via the 'search' parameter in all versions up to, and including, 6.4.8 due to insufficient escaping on the user supplied…
*-6.4.8
6.4.9
05/08/2025
Filebird <= 6.4.2.1 – Authenticated (Author+) Insecure Direct Object Reference
The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.4.2.1 due to missing validation on a user controlled key. This…
*-6.4.2.1
6.4.6
23/02/2025
Filebird <= 6.3.2 – Missing Authorization
The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 6.3.2. This makes it…
*-6.3.2
6.3.4
02/12/2024
FileBird – WordPress Media Library Folders & File Manager <= 5.6.3 – Authenticated (Author+) Stored Cross-Site Scripting
The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the folder name parameter in all versions up to, and including, 5.6.3 due to insufficient input sanitization and…
*-5.6.3
5.6.4
16/04/2024
FileBird – WordPress Media Library Folders & File Manager <= 5.6.3 – Authenticated (Author+) Insecure Direct Object Reference
The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.6.3 via folder deletion due to missing validation on a user…
*-5.6.3
5.6.4
16/04/2024
FileBird <= 5.6.0 – Authenticated(Administrator+) Stored Cross-Site Scripting via Folder Import
The FileBird plugin for WordPress is vulnerable to Stored Cross-Site Scripting via imported folder titles in all versions up to, and including, 5.5.8.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…
*-5.6.0
5.6.1
19/01/2024
Filebird <= 5.1.4 – Missing Authorization via resAdminPermissionsCheck
The Filebird plugin for WordPress is vulnerable to unauthorized SPI key generation due to a missing capability check on the resAdminPermissionsCheck callback function function in versions up to, and including, 5.1.4. This makes it possible for authenticated attackers…
*-5.1.4
5.1.5
27/03/2023
Filebird 4.7.3 – Unauthenticated SQL Injection
The Filebird Plugin 4.7.3 introduced a SQL injection vulnerability as it is making SQL queries without escaping user input data from a HTTP post request. This is a major vulnerability as the user input is not escaped and…
4.7.3
4.7.4
16/06/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.