Security
فارسی
All products

jupiterx-core

WordPress · Plugin
28 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Jupiter X Core <= 4.62.0 - Missing Authorization to Unauthenticated Limited File Download via 'file' ParameterCVE-2026-120555 jupiterx-core WordPress Medium Fix reported
Jupiter X Core <= 4.62.0 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'archive_query' ParameterCVE-2026-120737 jupiterx-core WordPress Medium Fix reported
Jupiter X Core <= 4.62.0 - Unauthenticated Stored Cross-Site Scripting via Raven Register Custom User MetaCVE-2026-119219 jupiterx-core WordPress Medium Fix reported
Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier ParameterCVE-2026-106013 jupiterx-core WordPress Critical Fix reported
Jupiter X Core <= 4.61.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'forget_password_link' ParameterCVE-2026-10511 jupiterx-core WordPress Medium Fix reported
Jupiter X Core <= 4.14.1 - Missing AuthorizationCVE-2026-39490 jupiterx-core WordPress Medium Fix reported
Jupiter X Core <= 4.14.1 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2026-39491 jupiterx-core WordPress Medium Fix reported
JupiterX Core <= 4.14.1 - Authenticated (Subscriber+) Missing Authorization To Limited File Upload via Popup Template ImportCVE-2026-3533 jupiterx-core WordPress High Fix reported
JupiterX Core <= 4.10.1 - Authenticated (Contributor+) PHP Object InjectionCVE-2025-50004 jupiterx-core WordPress High Fix reported
JupiterX Core <= 4.11.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-58264 jupiterx-core WordPress Medium Fix reported
Jupiterx Core <= 4.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Inline SVGCVE-2025-3888 jupiterx-core WordPress Medium Fix reported
JupiterX Core <= 4.8.11 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-47475 jupiterx-core WordPress Medium Fix reported
Jupiter X Core <= 4.8.11 - Unauthenticated PHP Object Injection via PHARCVE-2025-2105 jupiterx-core WordPress High Fix reported
Jupiter X Core <= 4.8.7 - Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution)CVE-2025-0366 jupiterx-core WordPress High Fix reported
Jupiterx Core <= 4.8.7 - Authenticated (Contributor+) Arbitrary File ReadCVE-2025-0365 jupiterx-core WordPress Medium Fix reported
Jupiter X Core <= 4.8.5 - Missing Authorization to Authenticated Library SyncCVE-2024-12033 jupiterx-core WordPress Medium Fix reported
Jupiter X Core <= 4.8.5 - Missing Authorization to Unauthenticated Popup Template ExportCVE-2024-12316 jupiterx-core WordPress Medium Fix reported
Jupiter X Core <= 4.7.5 - Limited Unauthenticated Authentication Bypass to Account TakeoverCVE-2024-7781 jupiterx-core WordPress High Fix reported
Jupiter X Core <= 4.6.5 - Unauthenticated Arbitrary File UploadCVE-2024-7772 jupiterx-core WordPress Critical Fix reported
Jupiter X Core <= 4.6.6 - Unauthenticated Arbitrary File DownloadCVE-2023-3813 jupiterx-core WordPress High Fix reported