Login Request a demo
JO
Vendor
joomunited
9 products with CVEs on record
37
CVEs
0
On KEV
3
New 30D
Products
WF
WP File Download
Joomunited
8.1
5 CVEs0 on KEV2 new
WM
WP Media folder
Joomunited
8.8
4 CVEs0 on KEV1 new
WM
WP Meta SEO
joomunited
8.8
18 CVEs0 on KEV0 new
WL
WP Latest Posts
joomunited
6.4
3 CVEs0 on KEV0 new
WT
WP Table Manager
JoomUnited
6.5
3 CVEs0 on KEV0 new
WF
WP File Download Light
JoomUnited
6.5
1 CVEs0 on KEV0 new
WM
WP Media folder Addon
Joomunited
7.5
1 CVEs0 on KEV0 new
WM
WP Meta SEO (WordPress plugin)
JoomUnited
4.3
1 CVEs0 on KEV0 new
WP
Wp-smart-editor
Joomunited
6.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-39799
WF
WP File Download
Joomunited
7.1
0%
Oct 10WordPress WP File Download plugin <= 6.3.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-94538
WF
WP File Download
JoomUnited
8.1
0%
Oct 10WP File Download <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion/Modification via 'task' Parameter to Multiple Functions
CVE-2026-32569
WM
WP Media folder
Joomunited
7.1
0%
Oct 6WordPress WP Media folder plugin <= 6.2.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-14975
WF
WP File Download
JoomUnited
6.5
1%
Sep 5WP File Download <= 6.3.8 - Authenticated (Subscriber+) Arbitrary File Read via Path Traversal in 'remoteurl' Parameter
CVE-2026-14982
WF
WP File Download
JoomUnited
8.1
1%
Sep 2WP File Download <= 6.3.4 - Authenticated (Subscriber+) Arbitrary File Deletion via 'remoteurl' Parameter
CVE-2026-9620
WL
WP Latest Posts
joomunited
6.4
0%
Jun 24WP Latest Posts <= 5.0.11 - Authenticated (Author+) Stored Cross-Site Scripting via Post Content Image src Attribute
CVE-2026-9643
WM
WP Meta SEO
joomunited
7.2
0%
Jun 24WP Meta SEO <= 4.5.18 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI in 404 Logging
CVE-2026-11370
WM
WP Meta SEO
joomunited
6.4
0%
Jun 24WP Meta SEO <= 4.5.18 - Authenticated (Contributor+) Server-Side Request Forgery via 'new_link' Parameter
CVE-2026-9690
WM
WP Media folder Addon
Joomunited
7.5
0%
Jun 17WordPress WP Media folder Addon plugin <= 4.0.1 - Arbitrary File Download vulnerability
CVE-2025-5034
WF
WP File Download
Joomunited
7.1
0%
Jun 21WP File Download < 6.2.6 - Reflected XSS
CVE-2024-13374
WT
WP Table Manager
JoomUnited
6.5
0%
Feb 12WP Table Manager <= 4.1.3 - Missing Authorization to Authenticated (Subscriber+) Directory Traversal to Folder/File Name Disclosure
CVE-2022-47601
WT
WP Table Manager
JoomUnited
5.3
0%
Jan 2WordPress WP Table Manager plugin <= 3.5.2 - Broken Access Control
CVE-2024-45455
WM
WP Meta SEO
JoomUnited
4.8
0%
Sep 15WordPress WP Meta SEO plugin <= 4.5.13 - Cross Site Scripting (XSS) vulnerability
CVE-2024-45456
WM
WP Meta SEO
JoomUnited
5.4
0%
Sep 15WordPress WP Meta SEO plugin <= 4.5.13 - Cross Site Scripting (XSS) vulnerability
CVE-2024-4135
WL
WP Latest Posts
joomunited
5.4
0%
May 8WP Latest Posts <= 5.0.7 - Authenticated (Subscriber+) Arbitrary Shortcode Execution
CVE-2023-6961
WM
WP Meta SEO
joomunited
6.1
0%
May 2WP Meta SEO <= 4.5.12 - Unauthenticated Stored Cross-Site Scripting via Referer header
CVE-2023-6962
WM
WP Meta SEO
joomunited
5.3
0%
May 2WP Meta SEO <= 4.5.12 - Information Exposure via Meta Description
CVE-2024-32539
WF
WP File Download Light
JoomUnited
6.5
0%
Apr 17WordPress WP File Download Light plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability
CVE-2024-25907
WM
WP Media folder
JoomUnited
5.4
0%
Mar 21WordPress WP Media folder plugin <= 5.7.2 - Plugin Settings Change vulnerability
CVE-2024-25908
WM
WP Media folder
JoomUnited
4.3
0%
Mar 21WordPress WP Media folder plugin <= 5.7.2 - Subscriber+ Arbitrary Post/Page Modification vulnerability
CVE-2024-25909
WM
WP Media folder
JoomUnited
8.8
1%
Feb 26WordPress WP Media folder Plugin <= 5.7.2 is vulnerable to Arbitrary File Upload
CVE-2024-22148
WP
Wp-smart-editor
Joomunited
6.1
0%
Feb 1WordPress WP Smart Editor Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-1381
WM
WP Meta Seo
Joomunited
8.8
2%
Apr 10WP Meta SEO < 4.5.5 - Author+ PHAR Deserialization
CVE-2022-47602
WT
WP Table Manager
JoomUnited
5.4
0%
Mar 29WordPress WP Table Manager Plugin <= 3.5.2 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-0875
WM
WP Meta Seo
Joomunited
8.8
1%
Mar 20WP Meta SEO < 4.5.3 - Subscriber+ SQLi
CVE-2023-0876
WM
WP Meta Seo
Joomunited
6.1
1%
Mar 20WP Meta SEO < 4.5.3 - Subscriber+ Improper Authorization causing Arbitrary Redirect
CVE-2023-1022
WM
WP Meta SEO
joomunited
4.3
1%
Feb 28WP Meta SEO <= 4.5.3 - Missing Authorization in 'wpmsGGSaveInformation'
CVE-2023-1023
WM
WP Meta SEO
joomunited
4.3
1%
Feb 28WP Meta SEO <= 4.5.3 - Missing Authorization in 'saveSitemapSettings'
CVE-2023-1024
WM
WP Meta SEO
joomunited
4.3
1%
Feb 28WP Meta SEO <= 4.5.3 - Missing Authorization in 'regenerateSitemaps'
CVE-2023-1026
WM
WP Meta SEO
joomunited
4.3
1%
Feb 28WP Meta SEO <= 4.5.3 - Missing Authorization in 'listPostsCategory'
CVE-2023-1027
WM
WP Meta SEO
joomunited
4.3
0%
Feb 28WP Meta SEO <= 4.5.3 - Missing Authorization in 'checkAllCategoryInSitemap'
CVE-2023-1028
WM
WP Meta SEO
joomunited
4.3
0%
Feb 28WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'setIgnore'
CVE-2023-1029
WM
WP Meta SEO
joomunited
4.3
0%
Feb 24WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'regenerateSitemaps'
CVE-2022-30337
WM
WP Meta SEO (WordPress plugin)
JoomUnited
4.3
0%
Jul 21WordPress WP Meta SEO plugin <= 4.4.8 - Social Settings Update vis Cross-Site Request Forgery (CSRF) vulnerability
CVE-2022-1093
WM
WP Meta Seo
Joomunited
4.8
1%
May 23WP Meta SEO < 4.4.7 - Admin+ Stored Cross-Site Scripting via breadcrumbs
CVE-2016-10913
WL
WP Latest Posts
Joomunited
6.1
1%
Aug 20The wp-latest-posts plugin before 3.7.5 for WordPress has XSS