Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2024-53825: Filebird may let users access files without permission

CVE-2024-53825 · published 1 year ago

Summary

Versions of Filebird up to 6.3.2 do not correctly verify who is allowed to view or change files, so an attacker could reach data they shouldn’t. This could expose confidential information or allow unwanted changes. Upgrade to the newest Filebird release or apply the vendor’s patch and review your file access settings.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
ninjateam	filebird	<= 6.3.2 `cpe:2.3:a:ninjateam:filebird::::::wordpress::*`

Original advisory text

Missing Authorization vulnerability in Ninja Team Filebird filebird allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Filebird: from n/a through <= 6.3.2.

References

https://patchstack.com/database/wordpress/plugin/filebird/vulnerability/wordpres... Third Party Advisory
https://patchstack.com/database/Wordpress/Plugin/filebird/vulnerability/wordpres... Third Party Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

7.2 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-862Missing Authorization

Timeline

Published6 Dec 2024

Updated4 Nov 2026

First seen7 Mar 2026

Sources

CVE-2024-53825 · NVD

Track software like this

Free during beta