CVSS 3.1 Score 5.5 of 10 (medium)


Published Feb 5, 2024
Updated: Feb 13, 2024


The vulnerability with CVE ID CVE-2024-0691 affects the FileBird plugin for WordPress in versions up to and including It is a Stored Cross-Site Scripting vulnerability that occurs due to insufficient input sanitization and output escaping. This vulnerability allows authenticated attackers with administrator access to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additionally, it may be possible for an attacker to socially engineer an administrator into uploading a malicious folder import. The potential danger this vulnerability poses to an organization is the risk of unauthorized execution of arbitrary scripts and potential compromise of user data. To remediate this vulnerability, users should update the FileBird plugin to the latest version available, which includes proper input sanitization and output escaping to prevent cross-site scripting attacks.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-0691 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options