[ Vendor · 3 CVEs ]
Joomunited
CVEs affecting Joomunited published in the last 30 days, plus any Joomunited CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-39799 | 10 Oct 2026 | CVSS 7.1 | Joomunited WP File DownloadUnauthenticated Cross Site Scripting (XSS) in WP File Download <= 6.3.6 versions. | |
| CVE-2026-94538 | 10 Oct 2026 | CVSS 8.1 | JoomUnited WP File DownloadThe WP File Download plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.3.9. This is due to the… | |
| CVE-2026-32569 | 6 Oct 2026 | CVSS 7.1 | Joomunited WP Media folderUnauthenticated Cross Site Scripting (XSS) in WP Media folder <= 6.2.2 versions. |