J
Vendor security profile
JoomUnited
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs4
Critical0
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS7.6
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
1
3
CVE KEV
CVE severity distribution
4toplam CVE
High4 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
7.1
CVE-2026-39799
WordPress WP File Download plugin <= 6.3.6 - Cross Site Scripting (XSS) vulnerability
J
Patch status unknownEPSS %0
8.1
CVE-2026-94538
WP File Download <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion/Modification via 'task' Parameter to Multiple Functions
J
Patch status unknownEPSS %0
7.1
CVE-2026-32569
WordPress WP Media folder plugin <= 6.2.2 - Cross Site Scripting (XSS) vulnerability
J
Patch status unknownEPSS %0
8.1
CVE-2026-14982
WP File Download <= 6.3.4 - Authenticated (Subscriber+) Arbitrary File Deletion via 'remoteurl' Parameter
J
Patch status unknownEPSS %1