Login Request a demo
JX
Product
Jupiter X Core
by artbees · last CVE Oct 28, 2026
17
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities17In the news0Timeline
Severity mix
Critical 5High 6Medium 6Low 0
Severity
All severities17Critical5High6Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jupiter X Core to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-3533
8.8
1%
Mar 23
JupiterX Core <= 4.14.1 - Authenticated (Subscriber+) Missing Authorization To Limited File Upload via Popup Template Import
Affected: through 4.14.1
CVE-2025-0366
8.8
2%
Feb 1
The Jupiter X Core plugin for WordPress is vulnerable to Local File Inclusion to Remote Code Execution in all versions up to, and including, 4.8.7 via the get_svg() function
Affected: before 4.8.8
CVE-2023-38385
8.8
1%
Dec 13
Missing Authorization vulnerability in Artbees JupiterX Core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JupiterX Core: from 3.0.0…
Affected: 3.0.0 before 3.3.5
CVE-2023-38394
8.8
0%
Jun 19
Missing Authorization vulnerability in Artbees JupiterX Core.This issue affects JupiterX Core: from 3.0.0 through 3.3.0
Affected: 3.0.0 before 3.3.5
CVE-2025-2105
8.1
1%
Apr 26
The Jupiter X Core plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.8.11 via deserialization of untrusted input from the 'file'…
Affected: before 4.8.12
CVE-2023-3813
7.5
1%
Jul 21
The Jupiter X Core plugin for WordPress is vulnerable to arbitrary file downloads in versions up to, and including, 4.6.6
Affected: through 2.5.0
Showing 6