Joomunited vulnerabilities

Products

• Wp Meta Seo 16
• Wp Meta Seo 13
• Wp File Download 4
• Wp Media Folder 4
• Wp Table Manager 3
• Wp Latest Posts 2
• Wp Table Manager 2

Newest

• joomunited wp file download WordPress WP File Download plugin <= 6.3.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-39799 7.1 HighOctober 10, 2026
• joomunited wp file download WP File Download <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion/Modification via 'task' Parameter to Multiple Functions CVE-2026-94538 8.1 HighOctober 10, 2026
• joomunited wp media folder WordPress WP Media folder plugin <= 6.2.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-32569 7.1 HighOctober 6, 2026
• joomunited wp file download WP File Download <= 6.3.8 - Authenticated (Subscriber+) Arbitrary File Read via Path Traversal in 'remoteurl' Parameter CVE-2026-14975 6.5 MediumSeptember 5, 2026
• joomunited wp file download WP File Download <= 6.3.4 - Authenticated (Subscriber+) Arbitrary File Deletion via 'remoteurl' Parameter CVE-2026-14982 8.1 HighSeptember 2, 2026
• joomunited wp latest posts WP Latest Posts <= 5.0.11 - Authenticated (Author+) Stored Cross-Site Scripting via Post Content Image src Attribute CVE-2026-9620 6.4 MediumJune 24, 2026
• joomunited wp meta seo WP Meta SEO <= 4.5.18 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI in 404 Logging CVE-2026-9643 7.2 HighJune 24, 2026
• joomunited wp meta seo WP Meta SEO <= 4.5.18 - Authenticated (Contributor+) Server-Side Request Forgery via 'new_link' Parameter CVE-2026-11370 6.4 MediumJune 24, 2026
• joomunited wp media folder addon WordPress WP Media folder Addon plugin <= 4.0.1 - Arbitrary File Download vulnerability CVE-2026-9690 7.5 HighJune 17, 2026
• joomunited wp file download, unknown wp-file-download +1 more WP File Download < 6.2.6 - Reflected XSS CVE-2025-5034 7.1 HighJune 21, 2025
• joomunited wp table manager WP Table Manager <= 4.1.3 - Missing Authorization to Authenticated (Subscriber+) Directory Traversal to Folder/File Name Disclosure CVE-2024-13374 4.3 MediumFebruary 12, 2025
• joomunited wp table manager WordPress WP Table Manager plugin <= 3.5.2 - Broken Access Control CVE-2022-47601 5.3 MediumJanuary 2, 2025
• joomunited wp meta seo WordPress WP Meta SEO plugin <= 4.5.13 - Cross Site Scripting (XSS) vulnerability CVE-2024-45455 5.9 MediumSeptember 15, 2024
• joomunited wp meta seo WordPress WP Meta SEO plugin <= 4.5.13 - Cross Site Scripting (XSS) vulnerability CVE-2024-45456 6.5 MediumSeptember 15, 2024
• joomunited wp latest posts WP Latest Posts <= 5.0.7 - Authenticated (Subscriber+) Arbitrary Shortcode Execution CVE-2024-4135 5.4 MediumMay 8, 2024
• joomunited wp meta seo WP Meta SEO <= 4.5.12 - Unauthenticated Stored Cross-Site Scripting via Referer header CVE-2023-6961 7.2 HighMay 2, 2024
• joomunited wp meta seo WP Meta SEO <= 4.5.12 - Information Exposure via Meta Description CVE-2023-6962 5.3 MediumMay 2, 2024
• joomunited wp file download light WordPress WP File Download Light plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-32539 6.5 MediumApril 17, 2024
• joomunited wp media folder WordPress WP Media folder plugin <= 5.7.2 - Plugin Settings Change vulnerability CVE-2024-25907 5.4 MediumMarch 21, 2024
• joomunited wp media folder WordPress WP Media folder plugin <= 5.7.2 - Subscriber+ Arbitrary Post/Page Modification vulnerability CVE-2024-25908 4.3 MediumMarch 21, 2024
• joomunited wp media folder WordPress WP Media folder Plugin <= 5.7.2 is vulnerable to Arbitrary File Upload CVE-2024-25909 9.9 CriticalFebruary 26, 2024
• wp smart editor joomunited, joomunited wp-smart-editor +1 more WordPress WP Smart Editor Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS) CVE-2024-22148 7.1 HighFebruary 1, 2024
• joomunited wp meta seo WP Meta SEO < 4.5.5 - Author+ PHAR Deserialization CVE-2023-1381 8.8 HighApril 10, 2023
• joomunited wp table manager WordPress WP Table Manager Plugin <= 3.5.2 is vulnerable to Cross Site Scripting (XSS) CVE-2022-47602 6.5 MediumMarch 29, 2023
• joomunited wp meta seo WP Meta SEO < 4.5.3 - Subscriber+ SQLi CVE-2023-0875 8.8 HighMarch 20, 2023
• joomunited wp meta seo WP Meta SEO < 4.5.3 - Subscriber+ Improper Authorization causing Arbitrary Redirect CVE-2023-0876 6.1 MediumMarch 20, 2023
• joomunited wp meta seo WP Meta SEO <= 4.5.3 - Missing Authorization in 'wpmsGGSaveInformation' CVE-2023-1022 5.4 MediumFebruary 28, 2023
• joomunited wp meta seo WP Meta SEO <= 4.5.3 - Missing Authorization in 'saveSitemapSettings' CVE-2023-1023 5.4 MediumFebruary 28, 2023
• joomunited wp meta seo WP Meta SEO <= 4.5.3 - Missing Authorization in 'regenerateSitemaps' CVE-2023-1024 4.3 MediumFebruary 28, 2023
• joomunited wp meta seo WP Meta SEO <= 4.5.3 - Missing Authorization in 'listPostsCategory' CVE-2023-1026 4.3 MediumFebruary 28, 2023
• joomunited wp meta seo WP Meta SEO <= 4.5.3 - Missing Authorization in 'checkAllCategoryInSitemap' CVE-2023-1027 4.3 MediumFebruary 28, 2023
• joomunited wp meta seo WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'setIgnore' CVE-2023-1028 4.3 MediumFebruary 28, 2023
• joomunited wp meta seo WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'regenerateSitemaps' CVE-2023-1029 4.3 MediumFebruary 24, 2023
• joomunited wp meta seo, wp meta seo (wordpress plugin) +1 more WordPress WP Meta SEO plugin <= 4.4.8 - Social Settings Update vis Cross-Site Request Forgery (CSRF) vulnerability CVE-2022-30337 5.4 MediumJuly 21, 2022
• joomunited wp meta seo WP Meta SEO < 4.4.7 - Admin+ Stored Cross-Site Scripting via breadcrumbs CVE-2022-1093 4.8 MediumMay 23, 2022
• joomunited wp latest posts The wp-latest-posts plugin before 3.7.5 for WordPress has XSS. CVE-2016-10913 6.1 MediumAugust 20, 2019