Vulnerabilities in joomunited

26 results
Vexday analysis

JooMunited apresenta 13 vulnerabilidades registradas sem nenhuma sob exploração ativa, com fraqueza dominante em controle de acesso inadequado (CWE-862). Três CVEs foram publicadas nos últimos 90 dias, indicando descobertas recentes, mas a ausência de críticas e de ataques observados sugere risco moderado e bem-definido.

CVE-2026-14975MEDIUMWP File Download <= 6.3.8 - Authenticated (Subscriber+) Arbitrary File Read via Path Traversal in 'remoteurl' ParameterEPSS 0.7%CVE-2024-25909CRITICALWordPress WP Media folder Plugin <= 5.7.2 is vulnerable to Arbitrary File UploadEPSS 0.6%CVE-2023-1026MEDIUMWP Meta SEO <= 4.5.3 - Missing Authorization in 'listPostsCategory'EPSS 0.6%CVE-2023-1022MEDIUMWP Meta SEO <= 4.5.3 - Missing Authorization in 'wpmsGGSaveInformation'EPSS 0.6%CVE-2023-1023MEDIUMWP Meta SEO <= 4.5.3 - Missing Authorization in 'saveSitemapSettings'EPSS 0.5%CVE-2023-1024MEDIUMWP Meta SEO <= 4.5.3 - Missing Authorization in 'regenerateSitemaps'EPSS 0.5%CVE-2026-14982HIGHWP File Download <= 6.3.4 - Authenticated (Subscriber+) Arbitrary File Deletion via 'remoteurl' ParameterEPSS 0.5%CVE-2026-9690HIGHWordPress WP Media folder Addon plugin <= 4.0.1 - Arbitrary File Download vulnerabilityEPSS 0.5%CVE-2023-1027MEDIUMWP Meta SEO <= 4.5.3 - Missing Authorization in 'checkAllCategoryInSitemap'EPSS 0.5%CVE-2023-6961HIGHWP Meta SEO <= 4.5.12 - Unauthenticated Stored Cross-Site Scripting via Referer headerEPSS 0.4%CVE-2023-6962MEDIUMWP Meta SEO <= 4.5.12 - Information Exposure via Meta DescriptionEPSS 0.4%CVE-2026-9643HIGHWP Meta SEO <= 4.5.18 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI in 404 LoggingEPSS 0.4%CVE-2022-47602MEDIUMWordPress WP Table Manager Plugin <= 3.5.2 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2022-47601MEDIUMWordPress WP Table Manager plugin <= 3.5.2 - Broken Access ControlEPSS 0.4%CVE-2024-4135MEDIUMWP Latest Posts <= 5.0.7 - Authenticated (Subscriber+) Arbitrary Shortcode ExecutionEPSS 0.4%CVE-2024-25907MEDIUMWordPress WP Media folder plugin <= 5.7.2 - Plugin Settings Change vulnerabilityEPSS 0.4%CVE-2026-9620MEDIUMWP Latest Posts <= 5.0.11 - Authenticated (Author+) Stored Cross-Site Scripting via Post Content Image src AttributeEPSS 0.4%CVE-2024-32539MEDIUMWordPress WP File Download Light plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-25908MEDIUMWordPress WP Media folder plugin <= 5.7.2 - Subscriber+ Arbitrary Post/Page Modification vulnerabilityEPSS 0.3%CVE-2026-11370MEDIUMWP Meta SEO <= 4.5.18 - Authenticated (Contributor+) Server-Side Request Forgery via 'new_link' ParameterEPSS 0.3%