Read the docs

JoomUnited

Records36All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high11CVSS 7.0–8.9

Exploited now

JoomUnited records in CISA KEV

No JoomUnited vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Meta Seo 16 records HIGH Wp Table Manager 2 records LOW Wp-smart-editor 1 record LOW Wp File Download 1 record MEDIUM Wp Latest Posts 1 record LOW Wp Media Folder 1 record MEDIUM

Records

1 record in Wp File Download · all components

TI-2025-04513 CVE-2025-5034 · GHSA-3rww-fm75-jc23

WP File Download < 6.2.6 - Reflected XSS

Priority MEDIUM 64

The wp-file-download WordPress plugin before 6.2.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00253 Published 2025-06-21 Fixed in 6.2.6 CWE-79
Open these records in search →