JoomUnited WP File Download

2 known vulnerabilities in JoomUnited WP File Download, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-14975 CVSS 6.5 medium The WP File Download plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.3.8 via the…
  • CVE-2026-14982 CVSS 8.1 high The WP File Download plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete…