Skip to content
Noroxi

JoomUnited records

22 published records for vendor JoomUnited.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
22.7%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 19
  2. 22
  3. 23
  4. 24
  5. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

22 records
  • CVE-2023-1381
    36Monitor

    WP Meta SEO < 4.5.5 - Author+ PHAR Deserialization

    HighCVSS 8.8No exploitEPSS 1%

    joomunited · wp meta seoApr 10, 2023

  • CVE-2023-0875
    35Monitor

    WP Meta SEO < 4.5.3 - Subscriber+ SQLi

    HighCVSS 8.8No exploitEPSS 0%

    joomunited · wp meta seoMar 20, 2023

  • CVE-2024-25909
    35Monitor

    WordPress WP Media folder Plugin <= 5.7.2 is vulnerable to Arbitrary File Upload

    HighCVSS 8.8No exploitEPSS 0%

    joomunited · wp media folderFeb 26, 2024

  • CVE-2025-5034
    28Monitor

    WP File Download < 6.2.6 - Reflected XSS

    HighCVSS 7.1No exploitEPSS 0%

    joomunited · wp file downloadJun 21, 2025

  • CVE-2024-13374
    26Monitor

    WP Table Manager <= 4.1.3 - Missing Authorization to Authenticated (Subscriber+) Directory Traversal to Folder/File Name Disclosure

    MediumCVSS 6.5No exploitEPSS 0%

    joomunited · wp table managerFeb 12, 2025

  • CVE-2016-10913
    24Monitor

    The wp-latest-posts plugin before 3.7.5 for WordPress has XSS.

    MediumCVSS 6.1No exploitEPSS 0%

    joomunited · wp latest postsAug 20, 2019

  • CVE-2023-0876
    24Monitor

    WP Meta SEO < 4.5.3 - Subscriber+ Improper Authorization causing Arbitrary Redirect

    MediumCVSS 6.1Proof of conceptEPSS 0%

    joomunited · wp meta seoMar 20, 2023

  • CVE-2023-6961
    24Monitor

    WP Meta SEO <= 4.5.12 - Unauthenticated Stored Cross-Site Scripting via Referer header

    MediumCVSS 6.1No exploitEPSS 0%

    joomunited · wp meta seoMay 2, 2024

  • CVE-2024-22148
    24Monitor

    WordPress WP Smart Editor Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    joomunited · wp-smart-editorFeb 1, 2024

  • CVE-2023-6962
    21Monitor

    WP Meta SEO <= 4.5.12 - Information Exposure via Meta Description

    MediumCVSS 5.3No exploitEPSS 0%

    joomunited · wp meta seoMay 2, 2024

  • CVE-2022-47602
    21Monitor

    WordPress WP Table Manager Plugin <= 3.5.2 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    joomunited · wp table managerMar 29, 2023

  • CVE-2024-45456
    21Monitor

    WordPress WP Meta SEO plugin <= 4.5.13 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    joomunited · wp meta seoSep 15, 2024

  • CVE-2022-1093
    19Monitor

    WP Meta SEO < 4.4.7 - Admin+ Stored Cross-Site Scripting via breadcrumbs

    MediumCVSS 4.8No exploitEPSS 0%

    joomunited · wp meta seoMay 23, 2022

  • CVE-2024-45455
    19Monitor

    WordPress WP Meta SEO plugin <= 4.5.13 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 4.8No exploitEPSS 0%

    joomunited · wp meta seoSep 15, 2024

  • CVE-2023-1026
    17Monitor

    WP Meta SEO <= 4.5.3 - Missing Authorization in 'listPostsCategory'

    MediumCVSS 4.3No exploitEPSS 0%

    joomunited · wp meta seoFeb 28, 2023

  • CVE-2023-1022
    17Monitor

    WP Meta SEO <= 4.5.3 - Missing Authorization in 'wpmsGGSaveInformation'

    MediumCVSS 4.3No exploitEPSS 0%

    joomunited · wp meta seoFeb 28, 2023

  • CVE-2023-1024
    17Monitor

    WP Meta SEO <= 4.5.3 - Missing Authorization in 'regenerateSitemaps'

    MediumCVSS 4.3No exploitEPSS 0%

    joomunited · wp meta seoFeb 28, 2023

  • CVE-2023-1023
    17Monitor

    WP Meta SEO <= 4.5.3 - Missing Authorization in 'saveSitemapSettings'

    MediumCVSS 4.3No exploitEPSS 0%

    joomunited · wp meta seoFeb 28, 2023

  • CVE-2023-1027
    17Monitor

    WP Meta SEO <= 4.5.3 - Missing Authorization in 'checkAllCategoryInSitemap'

    MediumCVSS 4.3No exploitEPSS 0%

    joomunited · wp meta seoFeb 28, 2023

  • CVE-2022-30337
    17Monitor

    WordPress WP Meta SEO plugin <= 4.4.8 - Social Settings Update vis Cross-Site Request Forgery (CSRF) vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    joomunited · wp meta seoJul 21, 2022

  • CVE-2023-1028
    17Monitor

    WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'setIgnore'

    MediumCVSS 4.3No exploitEPSS 0%

    joomunited · wp meta seoFeb 28, 2023

  • CVE-2023-1029
    17Monitor

    WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'regenerateSitemaps'

    MediumCVSS 4.3No exploitEPSS 0%

    joomunited · wp meta seoFeb 24, 2023