WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
filebird
Published
2025-10-17
Title
FileBird < 6.5.0 - Author+ Settings Reset
Slug
filebird
Published
2025-12-15
Title
FileBird – WordPress Media Library Folders & File Manager < 6.5.2 - Missing Authorization to Authenticated (Author+) Global Folders Tampering
Slug
filebird-document-library
Published
2024-07-04
Title
FileBird Document Library < 2.0.8 - Unauthenticated Sensitive Information Exposure
Slug
filebird-pro
Published
2025-10-25
Title
FileBird Pro < 6.5.2 - Missing Authorization
Slug
filedownload
Published
2014-08-01
Title
Filedownload 0.1 - (download.php) Remote File Disclosure
Slug
filedownload
Published
2015-07-11
Title
FileDownload <= 1.4 - Multiple Issues
Slug
fileorganizer
Published
2023-09-03
Title
FileOrganizer < 1.0.3 - Admin+ Arbitrary File Access
Slug
fileorganizer
Published
2024-04-23
Title
FileOrganizer and FileOrganizer Pro < 1.0.7 - Authenticated Stored Cross-Site Scripting
Slug
fileorganizer
Published
2024-06-06
Title
FileOrganizer < 1.0.8 - Sensitive Information Exposure via Directory Listing
Slug
fileorganizer
Published
2024-10-29
Title
FileOrganizer < 1.1.0 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
fileorganizer
Published
2024-12-06
Title
FileOrganizer < 1.1.5 - Authenticated (Administrator+) Local JavaScript File Inclusion
Slug
filepicker-media-uploader
Published
2026-02-17
Title
Filestack <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
files-download-delay
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
files-download-delay
Published
2022-05-13
Title
Files Download Delay < 1.0.7 - Subscriber+ Settings Reset
Slug
files-download-delay
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
files-download-delay
Published
2025-01-08
Title
Files Download Delay <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
filestack-upload
Published
2024-12-13
Title
Filestack Official < 3.0.0 - Reflected Cross-Site Scripting
Slug
filester
Published
2023-09-11
Title
File Manager Pro < 1.8 - Remote Code Execution via CSRF
Slug
filester
Published
2023-09-19
Title
File Manager Pro < 1.8.1 - Admin+ Stored Cross-Site Scripting
Slug
filester
Published
2023-09-19
Title
File Manager Pro < 1.8.1 - Admin+ Remote Code Execution
Slug
filester
Published
2024-08-02
Title
File Manager Pro – Filester < 1.8.3 - Authenticated Plugin Settings Update
Slug
filester
Published
2024-11-27
Title
File Manager Pro – Filester < 1.8.7- Authenticated (Subscriber+) Arbitrary File Upload
Slug
filester
Published
2024-11-27
Title
File Manager Pro – Filester < 1.8.6 - Authenticated (Administrator+) Local JavaScript File Inclusion
Slug
filester
Published
2024-12-18
Title
File Manager Pro – Filester < 1.8.7 - Missing Authorization to Authenticated (Subscriber+) Filebird Plugin Installation
Slug
filester
Published
2025-06-13
Title
File Manager Pro – Filester < 1.8.9 - Administrator+ Arbitrary File Upload