Plugin icon

FileBird – WordPress Media Library Folders & File Manager

filebird

Vulnerabilities:

9

Last Updated:

January 12, 2026

Active Installs:

200000

Published
Title
Fixed in
CVSS
Published
2025-12-15
Title
FileBird – WordPress Media Library Folders & File Manager < 6.5.2 - Missing Authorization to Authenticated (Author+) Global Folders Tampering
Fixed in
Fixed in 6.5.2
CVSS
4.3 (medium)
Published
2025-10-17
Title
FileBird < 6.5.0 - Author+ Settings Reset
Fixed in
Fixed in 6.5.0
CVSS
4.3 (medium)
Published
2025-08-05
Title
FileBird – WordPress Media Library Folders & File Manager < 6.4.9 - Authenticated (Author+) SQL Injection
Fixed in
Fixed in 6.4.9
CVSS
6.5 (medium)
Published
2025-02-23
Title
Filebird < 6.4.6 - Authenticated (Author+) Insecure Direct Object Reference
Fixed in
Fixed in 6.4.6
CVSS
4.3 (medium)
Published
2024-12-02
Title
Filebird < 6.3.4 - Missing Authorization
Fixed in
Fixed in 6.3.4
CVSS
4.3 (medium)
Published
2024-04-16
Title
FileBird < 5.6.4 - Author+ Users Folder Deletion
Fixed in
Fixed in 5.6.4
CVSS
3.8 (low)
Published
2024-04-16
Title
FileBird < 5.6.4 - Author+ Stored XSS
Fixed in
Fixed in 5.6.4
CVSS
5.9 (medium)
Published
2024-01-19
Title
FileBird < 5.6.1 - Admin+ Stored XSS
Fixed in
Fixed in 5.6.1
CVSS
5.5 (medium)
Published
2021-06-16
Title
Filebird 4.7.3 - Unauthenticated SQL Injection
Fixed in
Fixed in 4.7.4
CVSS
8.6 (high)