Ninja Team Filebird Authorization Bypass Vulnerability Allowing Insecure Direct Object References

An authorization bypass vulnerability has been identified in the Ninja Team Filebird WordPress plugin, allowing for exploitation of incorrectly configured access control security levels. This vulnerability affects Filebird versions through 6.4.2.1 and could enable unauthorized access to sensitive files or database interactions.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files or database interactions, bypassing normal access controls.

Remediation

Users of the WordPress Filebird plugin should update to version 6.4.6 or later to address this vulnerability.