Advisories · Technology
artbees Jupiter X Core.
Every CVE that names artbees Jupiter X Core among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameter
- artbees Jupiter X Core
- Authentication bypass
- CVSS 6.4 Medium
Jupiter X Core <= 4.61.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'forget_password_link' Parameter
- artbees Jupiter X Core
- Cross-site scripting (XSS)
- CVSS 8.8 High
JupiterX Core <= 4.14.1 - Authenticated (Subscriber+) Missing Authorization To Limited File Upload via Popup Template Import
- artbees Jupiter X Core
- Unrestricted file upload
- CVSS 6.4 Medium
Jupiterx Core <= 4.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Inline SVG
- artbees Jupiter X Core
- Cross-site scripting (XSS)
- CVSS 8.1 High
Jupiter X Core <= 4.8.11 - Unauthenticated PHP Object Injection via PHAR
- artbees Jupiter X Core
- Insecure deserialization
- CVSS 6.5 Medium
Jupiterx Core <= 4.8.7 - Authenticated (Contributor+) Arbitrary File Read
- artbees Jupiter X Core
- Path traversal
- CVSS 8.8 High
Jupiter X Core <= 4.8.7 - Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution)
- artbees Jupiter X Core
- File inclusion
- CVSS 4.3 Medium
Jupiter X Core <= 4.8.5 - Missing Authorization to Authenticated Library Sync
- artbees Jupiter X Core
- Broken access control
- CVSS 5.3 Medium
Jupiter X Core <= 4.8.5 - Missing Authorization to Unauthenticated Popup Template Export
- artbees Jupiter X Core
- Broken access control
- CVSS 8.1 High
Jupiter X Core <= 4.7.5 - Limited Unauthenticated Authentication Bypass to Account Takeover
- artbees Jupiter X Core
- Authentication bypass
- CVSS 9.8 CriticalCritical · CVSS 9+
Jupiter X Core <= 4.6.5 - Unauthenticated Arbitrary File Upload
- artbees Jupiter X Core
- Unrestricted file upload
- CVSS 7.5 High
Jupiter X Core <= 4.6.6 - Unauthenticated Arbitrary File Download
- artbees Jupiter X Core
- Path traversal
- CVSS 5.4 Medium
JupiterX Core <= 2.0.6 - Information Disclosure, Modification, and Denial of Service
- ArtBees Jupiter X Core
- Broken access control
- CVSS 8.8 High
Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 - Authenticated Privilege Escalation
- ArtBees Jupiter X Core
- ArtBees Jupiter
- Privilege escalation
- CVSS 5.4 Medium
JupiterX Theme <= 2.0.6 and JupiterX Core <= 2.0.6 - Authenticated Arbitrary Plugin Deactivation and Settings Modification
- ArtBees Jupiter X Core
- ArtBees Jupiter X
- Broken access control