What’s Vulnerable › Products
artbees Jupiter X Core vulnerabilities
22 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 15 published in the last 12 months.
Check whether your artbees Jupiter X Core version is affected
Latest artbees Jupiter X Core vulnerabilities
- CVE-2026-106013 — Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameter (CVSS 9.8)
- CVE-2026-10511 — Jupiter X Core <= 4.61.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'forget_password_link' Parameter (CVSS 6.4)
- CVE-2026-39490 — WordPress JupiterX Core plugin <= 4.14.1 - Broken Access Control vulnerability (CVSS 7.5)
- CVE-2026-39491 — WordPress JupiterX Core plugin <= 4.14.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2026-3533 — JupiterX Core <= 4.14.1 - Authenticated (Subscriber+) Missing Authorization To Limited File Upload via Popup Template Import (CVSS 8.8)
- CVE-2025-50004 — WordPress JupiterX Core plugin <= 4.10.1 - PHP Object Injection vulnerability (CVSS 8.8)
- CVE-2025-58264 — WordPress JupiterX Core Plugin <= 4.11.0 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
- CVE-2025-3888 — Jupiterx Core <= 4.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Inline SVG (CVSS 5.4)
- CVE-2025-47475 — WordPress JupiterX Core plugin <= 4.8.11 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
- CVE-2025-2105 — Jupiter X Core <= 4.8.11 - Unauthenticated PHP Object Injection via PHAR (CVSS 8.1)
- CVE-2025-0366 — Jupiter X Core <= 4.8.7 - Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution) (CVSS 8.8)
- CVE-2025-0365 — Jupiterx Core <= 4.8.7 - Authenticated (Contributor+) Arbitrary File Read (CVSS 6.5)
- CVE-2024-12316 — Jupiter X Core <= 4.8.5 - Missing Authorization to Unauthenticated Popup Template Export (CVSS 5.3)
- CVE-2024-12033 — Jupiter X Core <= 4.8.5 - Missing Authorization to Authenticated Library Sync (CVSS 4.3)
- CVE-2023-38385 — WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability (CVSS 8.8)
- CVE-2024-7781 — Jupiter X Core <= 4.7.5 - Limited Unauthenticated Authentication Bypass to Account Takeover (CVSS 9.8)
- CVE-2024-7772 — Jupiter X Core <= 4.6.5 - Unauthenticated Arbitrary File Upload (CVSS 9.8)
- CVE-2023-38389 — WordPress Jupiter X Core plugin <= 3.3.8 - Unauthenticated Account Takeover vulnerability (CVSS 9.8)
- CVE-2023-38394 — WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability (CVSS 8.8)
- CVE-2023-38388 — WordPress Jupiter X Core plugin <= 3.3.5 - Unauth. Arbitrary File Upload vulnerability (CVSS 9.8)
- CVE-2023-3813 — Jupiter X Core <= 4.6.6 - Unauthenticated Arbitrary File Download (CVSS 7.5)
- CVE-2022-1656 — JupiterX Theme <= 2.0.6 and JupiterX Core <= 2.0.6 - Authenticated Arbitrary Plugin Deactivation and Settings Modification (CVSS 5.4)