CVE-2025-3888

<= 4.8.12

The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File inclusion in all versions up to,

6.4MEDIUM

CVE-2025-2105

< 4.8.12

The Jupiter X Core plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.8.11 via des

8.1HIGH

CVE-2025-0366

< 4.8.8

The Jupiter X Core plugin for WordPress is vulnerable to Local File Inclusion to Remote Code Execution in all versions up to, and

8.8HIGH

CVE-2025-0365

< 4.8.8

The Jupiter X Core plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.8.7 via the i

6.5MEDIUM

CVE-2024-12316

< 4.8.6

The Jupiter X Core plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the expo

5.3MEDIUM

CVE-2024-12033

< 4.8.6

The Jupiter X Core plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the sync_librari

4.3MEDIUM

CVE-2023-38385

>= 3.0.0 and < 3.3.5

Missing Authorization vulnerability in Artbees JupiterX Core allows Exploiting Incorrectly Configured Access Control Security Leve

8.3HIGH

CVE-2024-7781

< 4.7.8

The Jupiter X Core plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 4.7.5. This i

8.1HIGH

CVE-2024-7772

< 4.6.6

The Jupiter X Core plugin for WordPress is vulnerable to arbitrary file uploads due to a mishandled file type validation in the 'v

9.8CRITICAL

CVE-2023-38389

<= 3.3.8

Incorrect Authorization vulnerability in Artbees JupiterX Core allows Accessing Functionality Not Properly Constrained by ACLs.Thi

9.8CRITICAL

CVE-2023-38394

>= 3.0.0 and < 3.3.5

Missing Authorization vulnerability in Artbees JupiterX Core.This issue affects JupiterX Core: from 3.0.0 through 3.3.0.

5.4MEDIUM

CVE-2023-38388

< 3.3.8

Unrestricted Upload of File with Dangerous Type vulnerability in Artbees JupiterX Core.This issue affects JupiterX Core: from n/a

9.0CRITICAL

CVE-2023-3813

<= 2.5.0

The Jupiter X Core plugin for WordPress is vulnerable to arbitrary file downloads in versions up to, and including, 4.6.6. This ma

7.5HIGH

CVE-2022-1656

<= 2.0.6

Vulnerable versions of the JupiterX Theme (<=2.0.6) allow any logged-in user, including subscriber-level users, to access any of t

5.4MEDIUM