HIGH Published Oct 10, 2026 CVE-2026-39799 CVE-2026-39799 published: Unauthenticated Cross Site Scripting (XSS) in WP File Download <= 6.3.6 versions. View full NVD advisory → Related reading How CVE Scoring Works: Understanding CVSS Severity Ratings ← Back to CVE watch