Artbees vulnerabilities

Products

• Jupiter X Core 15
• Jupiter X Core 14
• Jupiterx Core 9
• Jupiterx 5
• Jupiter 3
• Sellkit 3
• Jupiter X 2

Newest

• artbees jupiter x core Jupiter X Core <= 4.62.0 - Missing Authorization to Unauthenticated Limited File Download via 'file' Parameter CVE-2026-120555 5.3 MediumNovember 7, 2026
• artbees jupiter x core Jupiter X Core <= 4.62.0 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'archive_query' Parameter CVE-2026-120737 5.9 MediumNovember 7, 2026
• artbees jupiter x core Jupiter X Core <= 4.62.0 - Unauthenticated Stored Cross-Site Scripting via Raven Register Custom User Meta CVE-2026-119219 5.4 MediumNovember 7, 2026
• artbees jupiter x core Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameter CVE-2026-106013 9.8 CriticalOctober 28, 2026
• artbees jupiter x core Jupiter X Core <= 4.61.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'forget_password_link' Parameter CVE-2026-10511 6.4 MediumOctober 27, 2026
• artbees sellkit SellKit 2.3.5 - 2.7.0 - Unauthenticated Arbitrary Price Manipulation via 'sellkit_product_prices' Parameter CVE-2026-94254 5.3 MediumOctober 14, 2026
• artbees jupiterx core WordPress JupiterX Core plugin <= 4.14.1 - Broken Access Control vulnerability CVE-2026-39490 7.5 HighJune 16, 2026
• artbees jupiterx core WordPress JupiterX Core plugin <= 4.14.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-39491 6.5 MediumJune 15, 2026
• artbees jupiter x core JupiterX Core <= 4.14.1 - Authenticated (Subscriber+) Missing Authorization To Limited File Upload via Popup Template Import CVE-2026-3533 8.8 HighMarch 23, 2026
• artbees jupiterx core WordPress JupiterX Core plugin <= 4.10.1 - PHP Object Injection vulnerability CVE-2025-50004 8.8 HighJanuary 22, 2026
• artbees jupiterx core WordPress JupiterX Core Plugin <= 4.11.0 - Cross Site Scripting (XSS) Vulnerability CVE-2025-58264 6.5 MediumSeptember 22, 2025
• artbees jupiter x core Jupiterx Core <= 4.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Inline SVG CVE-2025-3888 6.4 MediumMay 17, 2025
• artbees jupiterx core WordPress JupiterX Core plugin <= 4.8.11 - Cross Site Scripting (XSS) Vulnerability CVE-2025-47475 6.5 MediumMay 7, 2025
• artbees jupiter x core Jupiter X Core <= 4.8.11 - Unauthenticated PHP Object Injection via PHAR CVE-2025-2105 8.1 HighApril 26, 2025
• artbees jupiter x core Jupiter X Core <= 4.8.7 - Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution) CVE-2025-0366 8.8 HighFebruary 1, 2025
• artbees jupiter x core Jupiterx Core <= 4.8.7 - Authenticated (Contributor+) Arbitrary File Read CVE-2025-0365 6.5 MediumFebruary 1, 2025
• artbees jupiter x core Jupiter X Core <= 4.8.5 - Missing Authorization to Authenticated Library Sync CVE-2024-12033 4.3 MediumJanuary 7, 2025
• artbees jupiter x core Jupiter X Core <= 4.8.5 - Missing Authorization to Unauthenticated Popup Template Export CVE-2024-12316 5.3 MediumJanuary 7, 2025
• artbees jupiter x core, jupiterx core +1 more WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability CVE-2023-38385 8.3 HighDecember 13, 2024
• artbees jupiter x core Jupiter X Core <= 4.7.5 - Limited Unauthenticated Authentication Bypass to Account Takeover CVE-2024-7781 8.1 HighSeptember 26, 2024
• artbees jupiter x core Jupiter X Core <= 4.6.5 - Unauthenticated Arbitrary File Upload CVE-2024-7772 9.8 CriticalSeptember 26, 2024
• artbees jupiter x core, jupiterx core +1 more WordPress Jupiter X Core plugin <= 3.3.8 - Unauthenticated Account Takeover vulnerability CVE-2023-38389 9.8 CriticalJune 21, 2024
• artbees jupiter x core, jupiterx core +1 more WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability CVE-2023-38394 5.4 MediumJune 19, 2024
• artbees sellkit, sellkit – funnel builder and checkout optimizer for woocommerce to sell more, faster +1 more SellKit – Funnel builder and checkout optimizer for WooCommerce to sell more, faster <= 1.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter CVE-2024-4608 6.4 MediumJune 6, 2024
• artbees sellkit WordPress SellKit plugin <= 1.8.1 - Arbitrary File Download vulnerability CVE-2024-30509 6.5 MediumMay 17, 2024
• artbees jupiterx WordPress JupiterX theme <= 3.0.0 - Auth. Local File Inclusion vulnerability CVE-2023-32110 7.6 HighMay 17, 2024
• artbees jupiter x core, jupiterx core +1 more WordPress Jupiter X Core plugin <= 3.3.5 - Unauth. Arbitrary File Upload vulnerability CVE-2023-38388 9.0 CriticalMarch 26, 2024
• artbees jupiter x core Jupiter X Core <= 4.6.6 - Unauthenticated Arbitrary File Download CVE-2023-3813 7.5 HighJuly 21, 2023
• artbees jupiterx, jupiter x core +1 more JupiterX Core <= 2.0.6 - Information Disclosure, Modification, and Denial of Service CVE-2022-1659 5.4 MediumJune 13, 2022
• artbees jupiter, jupiterx, jupiter x core +2 more Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 - Authenticated Privilege Escalation CVE-2022-1654 8.8 HighJune 13, 2022
• artbees jupiter Jupiter Theme <= 6.10.1 - Authenticated Arbitrary Plugin Deletion CVE-2022-1658 5.4 MediumJune 13, 2022
• artbees jupiter, jupiterx, jupiter x +2 more JupiterX Theme <= 2.0.6 and Jupiter Theme <= 6.10.1 - Authenticated Path Traversal and Local File Inclusion CVE-2022-1657 8.8 HighJune 13, 2022
• artbees jupiterx, jupiter x, jupiter x core +2 more JupiterX Theme <= 2.0.6 and JupiterX Core <= 2.0.6 - Authenticated Arbitrary Plugin Deactivation and Settings Modification CVE-2022-1656 5.4 MediumJune 13, 2022