CVSS: 5.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-53825 – WordPress FileBird Lite plugin <= 6.3.2 - Broken Access Control vulnerability
https://notcve.org/view.php?id=CVE-2024-53825
02 Dec 2024 — Missing Authorization vulnerability in Ninja Team Filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through 6.3.2. The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 6.3.2. This makes it possible for authenticated attackers, with Author-level access and above, to perform an unauthorized ... • https://patchstack.com/database/wordpress/plugin/filebird/vulnerability/wordpress-filebird-lite-plugin-6-3-2-broken-access-control-vulnerability?_s_id=cve • CWE-862: Missing Authorization •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-37504 – WordPress FileBird Document Library plugin <= 2.0.6 - Sensitive Data Exposure vulnerability
https://notcve.org/view.php?id=CVE-2024-37504
04 Jul 2024 — Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team FileBird Document Library.This issue affects FileBird Document Library: from n/a through 2.0.6. Exposición de información confidencial a una vulnerabilidad de actor no autorizado en la librería de documentos FileBird de Ninja Team. Este problema afecta a la librería de documentos FileBird: desde n/a hasta 2.0.6. The FileBird Document Library plugin for WordPress is vulnerable to Sensitive Information Exposure in all versi... • https://patchstack.com/database/vulnerability/filebird-document-library/wordpress-filebird-document-library-plugin-2-0-6-sensitive-data-exposure-vulnerability?_s_id=cve • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-25966 – WordPress FileBird plugin <= 5.1.4 - Broken Access Control vulnerability
https://notcve.org/view.php?id=CVE-2023-25966
27 Mar 2023 — Missing Authorization vulnerability in Ninja Team Filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through 5.1.4. The Filebird plugin for WordPress is vulnerable to unauthorized SPI key generation due to a missing capability check on the resAdminPermissionsCheck callback function function in versions up to, and including, 5.1.4. This makes it possible for authenticated attackers with author-level access to set the API key. • https://patchstack.com/database/wordpress/plugin/filebird/vulnerability/wordpress-filebird-plugin-5-1-4-broken-access-control-vulnerability?_s_id=cve • CWE-862: Missing Authorization •