WordPress plugin
FileBird – WordPress Media Library Folders & File Manager security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 11 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High0
- Medium10
- Low0
All FileBird – WordPress Media Library Folders & File Manager vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.4 | Authenticated (Author+) Stored Cross-Site Scripting ≤6.5.6Update to 6.5.7 | CVE-2026-15004 | |
| Medium4.3 | Missing Authorization to Authenticated (Author+) Global Folders Tampering ≤6.5.1Update to 6.5.2 | CVE-2025-12900 | |
| Medium4.3 | Improper Authorization to Authenticated (Author+) Settings Reset ≤6.4.9Update to 6.5.0 | CVE-2025-11510 | |
| Medium6.5 | Authenticated (Author+) SQL Injection ≤6.4.8Update to 6.4.9 | CVE-2025-6986 | |
| Medium4.3 | Authenticated (Author+) Insecure Direct Object Reference ≤6.4.2.1Update to 6.4.6 | CVE-2025-26977 | |
| Medium4.3 | Missing Authorization ≤6.3.2Update to 6.3.4 | CVE-2024-53825 | |
| Medium6.4 | Authenticated (Author+) Stored Cross-Site Scripting ≤5.6.3Update to 5.6.4 | CVE-2024-2345 | |
| Medium5.4 | Authenticated (Author+) Insecure Direct Object Reference ≤5.6.3Update to 5.6.4 | CVE-2024-2346 | |
| Medium5.5 | Authenticated(Administrator+) Stored Cross-Site Scripting via Folder Import ≤5.6.0Update to 5.6.1 | CVE-2024-0691 | |
| Medium5.4 | Missing Authorization via resAdminPermissionsCheck ≤5.1.4Update to 5.1.5 | CVE-2023-25966 | |
| Critical9.8 | Unauthenticated SQL Injection 4.7.3 – 4.7.3Update to 4.7.4 | CVE-2021-24385 |
- Medium5.4Authenticated (Author+) Stored Cross-Site Scripting
≤6.5.6Update to 6.5.7
- Medium4.3Missing Authorization to Authenticated (Author+) Global Folders Tampering
≤6.5.1Update to 6.5.2
- Medium4.3Improper Authorization to Authenticated (Author+) Settings Reset
≤6.4.9Update to 6.5.0
- Medium6.5Authenticated (Author+) SQL Injection
≤6.4.8Update to 6.4.9
- Medium4.3Authenticated (Author+) Insecure Direct Object Reference
≤6.4.2.1Update to 6.4.6
- Medium4.3Missing Authorization
≤6.3.2Update to 6.3.4
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
≤5.6.3Update to 5.6.4
- Medium5.4Authenticated (Author+) Insecure Direct Object Reference
≤5.6.3Update to 5.6.4
- Medium5.5Authenticated(Administrator+) Stored Cross-Site Scripting via Folder Import
≤5.6.0Update to 5.6.1
- Medium5.4Missing Authorization via resAdminPermissionsCheck
≤5.1.4Update to 5.1.5
- Critical9.8Unauthenticated SQL Injection
4.7.3 – 4.7.3Update to 4.7.4
FileBird – WordPress Media Library Folders & File Manager: common questions
Does FileBird – WordPress Media Library Folders & File Manager have known vulnerabilities?
Yes. VulnCrest Radar lists 11 known vulnerabilities in FileBird – WordPress Media Library Folders & File Manager: 1 critical, 10 medium. None are known to affect version null.
How do I check which version of FileBird – WordPress Media Library Folders & File Manager I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent FileBird – WordPress Media Library Folders & File Manager vulnerability?
CVE-2026-15004, published Sep 17, 2026: FileBird – WordPress Media Library Folders & File Manager <= 6.5.6 - Authenticated (Author+) Stored Cross-Site Scripting. Severity: Medium (CVSS 5.4).
Is any FileBird – WordPress Media Library Folders & File Manager vulnerability listed in CISA KEV?
No. None of the known FileBird – WordPress Media Library Folders & File Manager vulnerabilities is currently listed in the CISA KEV catalog.