Skip to content
Artbees Jupiter X Core vulnerabilities
-
artbees jupiter x core
Jupiterx Core <= 4.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Inline SVG
CVE-2025-3888
6.4 Medium
-
artbees jupiter x core
Jupiter X Core <= 4.8.11 - Unauthenticated PHP Object Injection via PHAR
CVE-2025-2105
8.1 High
-
artbees jupiter x core
Jupiter X Core <= 4.8.7 - Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution)
CVE-2025-0366
8.8 High
-
artbees jupiter x core
Jupiterx Core <= 4.8.7 - Authenticated (Contributor+) Arbitrary File Read
CVE-2025-0365
6.5 Medium
-
artbees jupiter x core
Jupiter X Core <= 4.8.5 - Missing Authorization to Authenticated Library Sync
CVE-2024-12033
4.3 Medium
-
artbees jupiter x core
Jupiter X Core <= 4.8.5 - Missing Authorization to Unauthenticated Popup Template Export
CVE-2024-12316
5.3 Medium
-
artbees jupiter x core, jupiterx core +1 more
WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability
CVE-2023-38385
8.3 High
-
artbees jupiter x core
Jupiter X Core <= 4.7.5 - Limited Unauthenticated Authentication Bypass to Account Takeover
CVE-2024-7781
8.1 High
-
artbees jupiter x core
Jupiter X Core <= 4.6.5 - Unauthenticated Arbitrary File Upload
CVE-2024-7772
9.8 Critical
-
artbees jupiter x core, jupiterx core +1 more
WordPress Jupiter X Core plugin <= 3.3.8 - Unauthenticated Account Takeover vulnerability
CVE-2023-38389
9.8 Critical
-
artbees jupiter x core, jupiterx core +1 more
WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability
CVE-2023-38394
5.4 Medium
-
artbees jupiter x core, jupiterx core +1 more
WordPress Jupiter X Core plugin <= 3.3.5 - Unauth. Arbitrary File Upload vulnerability
CVE-2023-38388
9.0 Critical
-
artbees jupiter x core
Jupiter X Core <= 4.6.6 - Unauthenticated Arbitrary File Download
CVE-2023-3813
7.5 High
-
artbees jupiterx, jupiter x, jupiter x core +2 more
JupiterX Theme <= 2.0.6 and JupiterX Core <= 2.0.6 - Authenticated Arbitrary Plugin Deactivation and Settings Modification
CVE-2022-1656
5.4 Medium