Now officially on WordPress.org

CVE Database / CVE-2024-53825

CVE · Medium

CVE-2024-53825 — FileBird – WordPress Media Library Folders & File Manager [filebird] < 6.3.4

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2024-53825 FileBird – WordPress Media Library Folders & File Manager [filebird] < 6.3.4 Missing Authorization Medium 4.7 < 6.3.4 6.3.4 2024-12-02 —

CVE-2024-53825

The FileBird WordPress plugin for managing media library folders is vulnerable to unauthorized access in versions through 6.3.2 because it fails to properly verify user permissions on a specific function. Any authenticated user with Author-level privileges or higher can exploit this flaw to perform actions they should not be able to execute. The vulnerability was fixed in version 6.3.4.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings