Log in Start free

JoomUnited

Products

ProductCVEsExploitedLatest
WP Meta SEO13–Jun 24, 2026
WP Media folder4–Oct 6, 2026
WP File Download4–Oct 10, 2026
WP Table Manager3–Feb 12, 2025
WP Latest Posts2–Jun 24, 2026
WP Media folder Addon1–Jun 17, 2026
WP Meta SEO (WordPress plugin)1–Jul 21, 2022
WP File Download Light1–Apr 17, 2024

Exploited and recent CVEs

  • CVE-2026-39799 High 7.1 WordPress WP File Download plugin <= 6.3.6 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-94538 High 8.1 WP File Download <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion/Modification via 'task' Parameter to Multiple Functions 0.2%
  • CVE-2026-32569 High 7.1 WordPress WP Media folder plugin <= 6.2.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-14975 Medium 6.5 WP File Download <= 6.3.8 - Authenticated (Subscriber+) Arbitrary File Read via Path Traversal in 'remoteurl' Parameter 0.9%
  • CVE-2026-14982 High 8.1 WP File Download <= 6.3.4 - Authenticated (Subscriber+) Arbitrary File Deletion via 'remoteurl' Parameter 0.8%
  • CVE-2026-9620 Medium 6.4 WP Latest Posts <= 5.0.11 - Authenticated (Author+) Stored Cross-Site Scripting via Post Content Image src Attribute 0.4%
  • CVE-2026-9643 High 7.2 WP Meta SEO <= 4.5.18 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI in 404 Logging 0.4%
  • CVE-2026-11370 Medium 6.4 WP Meta SEO <= 4.5.18 - Authenticated (Contributor+) Server-Side Request Forgery via 'new_link' Parameter 0.3%
  • CVE-2026-9690 High 7.5 WordPress WP Media folder Addon plugin <= 4.0.1 - Arbitrary File Download vulnerability 0.3%
  • CVE-2024-13374 Medium 4.3 WP Table Manager <= 4.1.3 - Missing Authorization to Authenticated (Subscriber+) Directory Traversal to Folder/File Name Disclosure 0.3%
  • CVE-2022-47601 Medium 5.3 WordPress WP Table Manager plugin <= 3.5.2 - Broken Access Control 0.4%
  • CVE-2024-45455 Medium 5.9 WordPress WP Meta SEO plugin <= 4.5.13 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-45456 Medium 6.5 WordPress WP Meta SEO plugin <= 4.5.13 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-4135 Medium 5.4 WP Latest Posts <= 5.0.7 - Authenticated (Subscriber+) Arbitrary Shortcode Execution 0.4%
  • CVE-2023-6961 High 7.2 WP Meta SEO <= 4.5.12 - Unauthenticated Stored Cross-Site Scripting via Referer header 0.4%
  • CVE-2023-6962 Medium 5.3 WP Meta SEO <= 4.5.12 - Information Exposure via Meta Description 0.4%
  • CVE-2024-32539 Medium 6.5 WordPress WP File Download Light plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-25907 Medium 5.4 WordPress WP Media folder plugin <= 5.7.2 - Plugin Settings Change vulnerability 0.4%
  • CVE-2024-25908 Medium 4.3 WordPress WP Media folder plugin <= 5.7.2 - Subscriber+ Arbitrary Post/Page Modification vulnerability 0.3%
  • CVE-2024-25909 Critical 9.9 WordPress WP Media folder Plugin <= 5.7.2 is vulnerable to Arbitrary File Upload 0.6%
  • CVE-2022-47602 Medium 6.5 WordPress WP Table Manager Plugin <= 3.5.2 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-1022 Medium 5.4 WP Meta SEO <= 4.5.3 - Missing Authorization in 'wpmsGGSaveInformation' 0.6%
  • CVE-2023-1023 Medium 5.4 WP Meta SEO <= 4.5.3 - Missing Authorization in 'saveSitemapSettings' 0.5%
  • CVE-2023-1024 Medium 4.3 WP Meta SEO <= 4.5.3 - Missing Authorization in 'regenerateSitemaps' 0.5%
  • CVE-2023-1026 Medium 4.3 WP Meta SEO <= 4.5.3 - Missing Authorization in 'listPostsCategory' 0.6%
  • CVE-2023-1027 Medium 4.3 WP Meta SEO <= 4.5.3 - Missing Authorization in 'checkAllCategoryInSitemap' 0.5%
  • CVE-2023-1028 Medium 4.3 WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'setIgnore' 0.3%
  • CVE-2023-1029 Medium 4.3 WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'regenerateSitemaps' 0.3%
  • CVE-2022-30337 Medium 5.4 WordPress WP Meta SEO plugin <= 4.4.8 - Social Settings Update vis Cross-Site Request Forgery (CSRF) vulnerability 0.3%