JoomUnited vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20238
3. 20249
4. 20252
5. 20269

Newest CVEs

• CVE-2026-39799

  WordPress WP File Download plugin <= 6.3.6 - Cross Site Scripting (XSS) vulnerability

  Joomunited · WP File Download

  High7.1
• CVE-2026-94538

  WP File Download <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion/Modification via 'task' Parameter to Multiple Functions

  JoomUnited · WP File Download

  High8.1
• CVE-2026-32569

  WordPress WP Media folder plugin <= 6.2.2 - Cross Site Scripting (XSS) vulnerability

  Joomunited · WP Media folder

  High7.1
• CVE-2026-14975

  WP File Download <= 6.3.8 - Authenticated (Subscriber+) Arbitrary File Read via Path Traversal in 'remoteurl' Parameter

  JoomUnited · WP File Download

  Medium6.5
• CVE-2026-14982

  WP File Download <= 6.3.4 - Authenticated (Subscriber+) Arbitrary File Deletion via 'remoteurl' Parameter

  JoomUnited · WP File Download

  High8.1
• CVE-2026-9620

  WP Latest Posts <= 5.0.11 - Authenticated (Author+) Stored Cross-Site Scripting via Post Content Image src Attribute

  joomunited · WP Latest Posts

  Medium6.4
• CVE-2026-9643

  WP Meta SEO <= 4.5.18 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI in 404 Logging

  joomunited · WP Meta SEO

  High7.2
• CVE-2026-11370

  WP Meta SEO <= 4.5.18 - Authenticated (Contributor+) Server-Side Request Forgery via 'new_link' Parameter

  joomunited · WP Meta SEO

  Medium6.4
• CVE-2026-9690

  WordPress WP Media folder Addon plugin <= 4.0.1 - Arbitrary File Download vulnerability

  Joomunited · WP Media folder Addon

  High7.5
• CVE-2024-13374

  WP Table Manager <= 4.1.3 - Missing Authorization to Authenticated (Subscriber+) Directory Traversal to Folder/File Name Disclosure

  JoomUnited · WP Table Manager

  Medium4.3