Joomunited Wp File Download
4 CVEs affecting Joomunited Wp File Download. Latest disclosed: 2026-10-10. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-94538 | High | 8.1 | 2026-10-10 | The WP File Download plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.3.9. This is due to the plugin not prop… |
CVE-2026-14982 | High | 8.1 | 2026-09-02 | The WP File Download plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete function in all versi… |
CVE-2026-39799 | High | 7.1 | 2026-10-10 | Unauthenticated Cross Site Scripting (XSS) in WP File Download <= 6.3.6 versions. |
CVE-2026-14975 | Medium | 6.5 | 2026-09-05 | The WP File Download plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.3.8 via the 'remoteurl' parameter. This… |