Description
Unauthenticated Arbitrary File Download in WP Media folder Addon <= 4.0.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Joomunited | WP Media folder Addon | ≤ 4.0.1 | — |
High · 7.5
CVE-2026-9690
EUVD-2026-37647GHSA-qpxc-jp7m-x687
WordPress WP Media folder Addon plugin <= 4.0.1 - Arbitrary File Download vulnerability
Published Jun 17, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack