CVE-2026-14975WP File Download <= 6.3.8 - Authenticated (Subscriber+) Arbitrary File Read via Path Traversal in 'remoteurl' Parameter Exploitation status Not known exploited Fix Affected product W WP File Download Published 09/05/2026 Severity Medium CVE-2026-14982WP File Download <= 6.3.4 - Authenticated (Subscriber+) Arbitrary File Deletion via 'remoteurl' Parameter Exploitation status Not known exploited Fix Affected product W WP File Download Published 09/02/2026 Severity High CVE-2026-9620WP Latest Posts <= 5.0.11 - Authenticated (Author+) Stored Cross-Site Scripting via Post Content Image src Attribute Exploitation status Not known exploited Fix Affected product W WP Latest Posts Published 06/24/2026 Severity Medium CVE-2026-9643WP Meta SEO <= 4.5.18 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI in 404 Logging Exploitation status Not known exploited Fix Affected product W WP Meta SEO Published 06/24/2026 Severity High CVE-2026-11370WP Meta SEO <= 4.5.18 - Authenticated (Contributor+) Server-Side Request Forgery via 'new_link' Parameter Exploitation status Not known exploited Fix Affected product W WP Meta SEO Published 06/24/2026 Severity Medium CVE-2026-9690WordPress WP Media folder Addon plugin <= 4.0.1 - Arbitrary File Download vulnerability Exploitation status Not known exploited Fix Affected product W WP Media folder Addon Published 06/17/2026 Severity High CVE-2025-5034WP File Download < 6.2.6 - Reflected XSS Exploitation status Public exploit Fix Affected product W wp-file-download Published 06/21/2025 Severity High CVE-2024-13374WP Table Manager <= 4.1.3 - Missing Authorization to Authenticated (Subscriber+) Directory Traversal to Folder/File Name Disclosure Exploitation status Not known exploited Fix Affected product W WP Table Manager Published 02/12/2025 Severity Medium CVE-2022-47601WordPress WP Table Manager plugin <= 3.5.2 - Broken Access Control Exploitation status Not known exploited Fix Affected product W WP Table Manager Published 01/02/2025 Severity Medium CVE-2024-45455WordPress WP Meta SEO plugin <= 4.5.13 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product W WP Meta SEO Published 09/15/2024 Severity Medium CVE-2024-45456WordPress WP Meta SEO plugin <= 4.5.13 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product W WP Meta SEO Published 09/15/2024 Severity Medium CVE-2024-4135WP Latest Posts <= 5.0.7 - Authenticated (Subscriber+) Arbitrary Shortcode Execution Exploitation status Not known exploited Fix Affected product W WP Latest Posts Published 05/08/2024 Severity Medium CVE-2023-6961WP Meta SEO <= 4.5.12 - Unauthenticated Stored Cross-Site Scripting via Referer header Exploitation status Not known exploited Fix Affected product W WP Meta SEO Published 05/02/2024 Severity High CVE-2023-6962WP Meta SEO <= 4.5.12 - Information Exposure via Meta Description Exploitation status Not known exploited Fix Affected product W WP Meta SEO Published 05/02/2024 Severity Medium CVE-2024-32539WordPress WP File Download Light plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product W WP File Download Light Published 04/17/2024 Severity Medium CVE-2024-25907WordPress WP Media folder plugin <= 5.7.2 - Plugin Settings Change vulnerability Exploitation status Not known exploited Fix Affected product W WP Media folder Published 03/21/2024 Severity Medium CVE-2024-25908WordPress WP Media folder plugin <= 5.7.2 - Subscriber+ Arbitrary Post/Page Modification vulnerability Exploitation status Not known exploited Fix Affected product W WP Media folder Published 03/21/2024 Severity Medium CVE-2024-25909WordPress WP Media folder Plugin <= 5.7.2 is vulnerable to Arbitrary File Upload Exploitation status Not known exploited Fix Affected product W WP Media folder Published 02/26/2024 Severity Critical CVE-2024-22148WordPress WP Smart Editor Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS) Exploitation status Not known exploited Fix Affected product J JoomUnited Published 02/01/2024 Severity High CVE-2023-1381WP Meta SEO < 4.5.5 - Author+ PHAR Deserialization Exploitation status Public exploit Fix Affected product W WP Meta SEO Published 04/10/2023 Severity High CVE-2022-47602WordPress WP Table Manager Plugin <= 3.5.2 is vulnerable to Cross Site Scripting (XSS) Exploitation status Not known exploited Fix Affected product W WP Table Manager Published 03/29/2023 Severity Medium CVE-2023-0875WP Meta SEO < 4.5.3 - Subscriber+ SQLi Exploitation status Public exploit Fix Affected product W WP Meta SEO Published 03/20/2023 Severity High CVE-2023-0876WP Meta SEO < 4.5.3 - Subscriber+ Improper Authorization causing Arbitrary Redirect Exploitation status Public exploit Fix Affected product W WP Meta SEO Published 03/20/2023 Severity Medium CVE-2023-1022WP Meta SEO <= 4.5.3 - Missing Authorization in 'wpmsGGSaveInformation' Exploitation status Not known exploited Fix Affected product W WP Meta SEO Published 02/28/2023 Severity Medium CVE-2023-1023WP Meta SEO <= 4.5.3 - Missing Authorization in 'saveSitemapSettings' Exploitation status Not known exploited Fix Affected product W WP Meta SEO Published 02/28/2023 Severity Medium CVE-2023-1024WP Meta SEO <= 4.5.3 - Missing Authorization in 'regenerateSitemaps' Exploitation status Not known exploited Fix Affected product W WP Meta SEO Published 02/28/2023 Severity Medium CVE-2023-1026WP Meta SEO <= 4.5.3 - Missing Authorization in 'listPostsCategory' Exploitation status Not known exploited Fix Affected product W WP Meta SEO Published 02/28/2023 Severity Medium CVE-2023-1027WP Meta SEO <= 4.5.3 - Missing Authorization in 'checkAllCategoryInSitemap' Exploitation status Not known exploited Fix Affected product W WP Meta SEO Published 02/28/2023 Severity Medium CVE-2023-1028WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'setIgnore' Exploitation status Not known exploited Fix Affected product W WP Meta SEO Published 02/28/2023 Severity Medium CVE-2023-1029WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'regenerateSitemaps' Exploitation status Not known exploited Fix Affected product W WP Meta SEO Published 02/24/2023 Severity Medium CVE-2022-30337WordPress WP Meta SEO plugin <= 4.4.8 - Social Settings Update vis Cross-Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product W WP Meta SEO (WordPress plugin) Published 07/21/2022 Severity Medium CVE-2022-1093WP Meta SEO < 4.4.7 - Admin+ Stored Cross-Site Scripting via breadcrumbs Exploitation status Not confirmed Fix Affected product W WP Meta SEO Published 05/23/2022 Severity Unknown CVE-2016-10913Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 08/20/2019 Severity Unknown 
.svg){kind=icon}
