Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

WP File Download — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in WP File Download, with AI-generated Chinese analysis, references, and POCs.

Vendor: JoomUnited

CVE ID Title CVSS Severity Published
CVE-2026-39799 WordPress WP File Download plugin <= 6.3.6 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-10-10
CVE-2026-94538 WP File Download <= 6.3.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion/Modification via 'task' Parameter to Multiple Functions CWE-862 8.1 High 2026-10-10
CVE-2026-14975 WP File Download <= 6.3.8 - Authenticated (Subscriber+) Arbitrary File Read via Path Traversal in 'remoteurl' Parameter CWE-22 6.5 Medium 2026-09-05
CVE-2026-14982 WP File Download <= 6.3.4 - Authenticated (Subscriber+) Arbitrary File Deletion via 'remoteurl' Parameter CWE-22 8.1 High 2026-09-02

All 4 known CVE vulnerabilities affecting WP File Download with full Chinese analysis, references, and POCs where available.