Unauthorized Data Modification Vulnerability in FileBird Plugin for WordPress

CVE-2025-11510

What is CVE-2025-11510?

The FileBird plugin for WordPress contains a vulnerability that allows authenticated users with author-level access or higher to perform unauthorized modifications. This occurs due to a missing capability check within the /filebird/v1/fb-wipe-clear-all-data function. As a result, these users can reset the plugin's configuration settings, potentially leading to data loss and disruption of service. It is crucial for users of the plugin to apply the latest updates to mitigate this risk and secure their WordPress installations.

References