CVE-2026-14975 | JoomUnited WP File Download Plugin up to 6.3.8 on WordPress Streaming Endpoint file.save remoteurl path traversal (EUVD-2026-71881)

A vulnerability described as problematic has been identified in JoomUnited WP File Download Plugin up to 6.3.8 on WordPress. Impacted is the function file.save of the component Streaming Endpoint. Executing a manipulation of the argument remoteurl can lead to path traversal. This vulnerability is registered as CVE-2026-14975. It is possible to...