Advisories · Technology
Joomunited WP File Download.
Every CVE that names Joomunited WP File Download among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
WordPress WP File Download plugin <= 6.3.6 - Cross Site Scripting (XSS) vulnerability
- Joomunited WP File Download
- Cross-site scripting (XSS)
- CVSS 8.1 High
WP File Download <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion/Modification via 'task' Parameter to Multiple Functions
- JoomUnited WP File Download
- Broken access control
- CVSS 6.5 Medium
WP File Download <= 6.3.8 - Authenticated (Subscriber+) Arbitrary File Read via Path Traversal in 'remoteurl' Parameter
- JoomUnited WP File Download
- Path traversal
- CVSS 8.1 High
WP File Download <= 6.3.4 - Authenticated (Subscriber+) Arbitrary File Deletion via 'remoteurl' Parameter
- JoomUnited WP File Download
- Path traversal