CVEs we hold for Joomunited
Records whose assigning authority named Joomunited as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-9690WordPress WP Media folder Addon plugin <= 4.0.1 - Arbitrary File Download vulnerabilityJoomunited WP Media folder Addon
CVE-2026-9643WP Meta SEO <= 4.5.18 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI in 404 Loggingjoomunited WP Meta SEO
CVE-2026-9620WP Latest Posts <= 5.0.11 - Authenticated (Author+) Stored Cross-Site Scripting via Post Content Image src Attributejoomunited WP Latest Posts
CVE-2026-14982WP File Download <= 6.3.4 - Authenticated (Subscriber+) Arbitrary File Deletion via 'remoteurl' ParameterJoomUnited WP File Download
CVE-2026-14975WP File Download <= 6.3.8 - Authenticated (Subscriber+) Arbitrary File Read via Path Traversal in 'remoteurl' ParameterJoomUnited WP File Download
CVE-2026-11370WP Meta SEO <= 4.5.18 - Authenticated (Contributor+) Server-Side Request Forgery via 'new_link' Parameterjoomunited WP Meta SEO
CVE-2024-45456WordPress WP Meta SEO plugin <= 4.5.13 - Cross Site Scripting (XSS) vulnerabilityJoomUnited WP Meta SEO
CVE-2024-45455WordPress WP Meta SEO plugin <= 4.5.13 - Cross Site Scripting (XSS) vulnerabilityJoomUnited WP Meta SEO
CVE-2024-4135WP Latest Posts <= 5.0.7 - Authenticated (Subscriber+) Arbitrary Shortcode Executionjoomunited WP Latest Posts
CVE-2024-32539WordPress WP File Download Light plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerabilityJoomUnited WP File Download Light
CVE-2024-25909WordPress WP Media folder Plugin <= 5.7.2 is vulnerable to Arbitrary File UploadJoomUnited WP Media folder
CVE-2024-25908WordPress WP Media folder plugin <= 5.7.2 - Subscriber+ Arbitrary Post/Page Modification vulnerabilityJoomUnited WP Media folder
CVE-2024-25907WordPress WP Media folder plugin <= 5.7.2 - Plugin Settings Change vulnerabilityJoomUnited WP Media folder
CVE-2024-13374WP Table Manager <= 4.1.3 - Missing Authorization to Authenticated (Subscriber+) Directory Traversal to Folder/File…JoomUnited WP Table Manager
CVE-2023-6962WP Meta SEO <= 4.5.12 - Information Exposure via Meta Descriptionjoomunited WP Meta SEO
CVE-2023-6961WP Meta SEO <= 4.5.12 - Unauthenticated Stored Cross-Site Scripting via Referer headerjoomunited WP Meta SEO
CVE-2023-1029WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'regenerateSitemaps'joomunited WP Meta SEO
CVE-2023-1028WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'setIgnore'joomunited WP Meta SEO
CVE-2023-1027WP Meta SEO <= 4.5.3 - Missing Authorization in 'checkAllCategoryInSitemap'joomunited WP Meta SEO
CVE-2023-1026WP Meta SEO <= 4.5.3 - Missing Authorization in 'listPostsCategory'joomunited WP Meta SEO
CVE-2023-1024WP Meta SEO <= 4.5.3 - Missing Authorization in 'regenerateSitemaps'joomunited WP Meta SEO
CVE-2023-1023WP Meta SEO <= 4.5.3 - Missing Authorization in 'saveSitemapSettings'joomunited WP Meta SEO
CVE-2023-1022WP Meta SEO <= 4.5.3 - Missing Authorization in 'wpmsGGSaveInformation'joomunited WP Meta SEO
CVE-2022-47602WordPress WP Table Manager Plugin <= 3.5.2 is vulnerable to Cross Site Scripting (XSS)JoomUnited WP Table Manager
CVE-2022-47601WordPress WP Table Manager plugin <= 3.5.2 - Broken Access ControlJoomUnited WP Table Manager
CVE-2022-30337WordPress WP Meta SEO plugin <= 4.4.8 - Social Settings Update vis Cross-Site Request Forgery (CSRF) vulnerabilityJoomUnited WP Meta SEO (WordPress plugin)
26 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.