Description
Unauthenticated Cross Site Scripting (XSS) in WP File Download <= 6.3.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Joomunited | WP File Download | ≤ 6.3.6 | — |
High · 7.1
CVE-2026-39799
EUVD-2026-96532GHSA-83j5-pr4h-q6hw
WordPress WP File Download plugin <= 6.3.6 - Cross Site Scripting (XSS) vulnerability
Published Oct 10, 2026 · Updated Oct 11, 2026 · Assigned by Patchstack