Ninjateam
Ninjateam Filebird: vulnerabilidades y CVE
Ninjateam Filebird tiene 12 vulnerabilidades publicadas, 3 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE12
Últimos 12 meses3
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-15004 | Media (5.4) | 0.24% | — | 18 sept 2026 | The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alt text in all versions up to, and including, 6.5.6 due to insufficient input… |
| CVE-2025-12900 | Media (4.3) | 0.23% | — | 15 dic 2025 | The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to missing authorization in all versions up to, and including, 6.5.1 via the "ConvertController::insertToNewTable"… |
| CVE-2025-11510 | Media (4.3) | 0.26% | — | 18 oct 2025 | The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /filebird/v1/fb-wipe-clear-all-data function… |
| CVE-2025-6986 | Media (6.5) | 0.38% | — | 6 ago 2025 | The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to SQL Injection via the 'search' parameter in all versions up to, and including, 6.4.8 due to insufficient escaping on… |
| CVE-2025-26977 | Alta (7.2) | 0.41% | — | 25 feb 2025 | Authorization Bypass Through User-Controlled Key vulnerability in Ninja Team Filebird filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through <=… |
| CVE-2023-25966 | Media (6.5) | 0.65% | — | 9 dic 2024 | Missing Authorization vulnerability in Ninja Team Filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through 5.1.4. |
| CVE-2024-53825 | Alta (7.2) | 0.36% | — | 6 dic 2024 | Missing Authorization vulnerability in Ninja Team Filebird filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through <= 6.3.2. |
| CVE-2024-35166 | Alta (7.5) | 0.57% | — | 14 may 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team Filebird.This issue affects Filebird: from n/a through 5.6.3. |
| CVE-2024-2346 | Media (5.4) | 0.31% | — | 2 may 2024 | The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.6.3 via folder deletion due to missing… |
| CVE-2024-2345 | Media (5.4) | 0.34% | — | 2 may 2024 | The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the folder name parameter in all versions up to, and including, 5.6.3 due to… |
| CVE-2024-0691 | Media (4.8) | 0.40% | — | 5 feb 2024 | The FileBird plugin for WordPress is vulnerable to Stored Cross-Site Scripting via imported folder titles in all versions up to, and including, 5.5.8.1 due to insufficient input sanitization and output escaping. This… |
| CVE-2021-24385 | Crítica (9.8) | 2.8% | — | 12 jul 2021 | The Filebird Plugin 4.7.3 introduced a SQL injection vulnerability as it is making SQL queries without escaping user input data from a HTTP post request. This is a major vulnerability as the user input is not escaped… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.
Otros productos de Ninjateam
Filester · 7WP Chat APP · 6Fastdup · 5WP Duplicate Page · 3Gdpr Ccpa Compliance & Cookie Consent Banner · 2Click TO Chat · 2Gdpr Ccpa Compliance Support · 2Header Footer Custom Code · 2Video Downloader FOR Tiktok · 2Chat FOR Telegram · 1Click TO Chat WP Support ALL IN ONE Floating Widget · 1Gpdr Ccpa Compliance Support · 1