FileBird – WordPress Media Library Folders & File Manager — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in FileBird – WordPress Media Library Folders & File Manager, with AI-generated Chinese analysis, references, and POCs.

Vendor: Ninja Team

CVE ID	Title	CVSS	Severity	Published
CVE-2026-15004	FileBird – WordPress Media Library Folders & File Manager <= 6.5.6 - Authenticated (Author+) Stored Cross-Site Scripting CWE-79	5.4	Medium	2026-09-18
CVE-2025-12900	FileBird – WordPress Media Library Folders & File Manager <= 6.5.1 - Missing Authorization to Authenticated (Author+) Global Folders Tampering CWE-862	4.3	Medium	2025-12-15
CVE-2025-11510	FileBird <= 6.4.9 - Improper Authorization to Authenticated (Author+) Settings Reset CWE-285	4.3	Medium	2025-10-18
CVE-2025-6986	FileBird – WordPress Media Library Folders & File Manager <= 6.4.8 - Authenticated (Author+) SQL Injection CWE-89	6.5	Medium	2025-08-06
CVE-2024-2346	FileBird – WordPress Media Library Folders & File Manager <= 5.6.3 - Authenticated (Author+) Insecure Direct Object Reference CWE-639	5.4	Medium	2024-05-02
CVE-2024-2345	FileBird – WordPress Media Library Folders & File Manager <= 5.6.3 - Authenticated (Author+) Stored Cross-Site Scripting CWE-79	6.4	Medium	2024-05-02
CVE-2024-0691	FileBird <= 5.6.0 - Authenticated(Administrator+) Stored Cross-Site Scripting via Folder Import CWE-79	5.5	Medium	2024-02-05
CVE-2021-24385	Filebird 4.7.3 - Unauthenticated SQL Injection CWE-89	9.8	-	2021-07-12

All 8 known CVE vulnerabilities affecting FileBird – WordPress Media Library Folders & File Manager with full Chinese analysis, references, and POCs where available.