AR
Vendor
artbees
29
CVEs
0
On KEV
2
New 30D
Products
JX9.8
Jupiter X Core
artbees
17 CVEs0 on KEV2 new
JU8.8
Jupiterx
Artbees
5 CVEs0 on KEV0 new
JU8.8
Jupiter
Artbees
3 CVEs0 on KEV0 new
JC8.8
JupiterX Core
artbees
3 CVEs0 on KEV0 new
SE5.4
Sellkit
Artbees
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-106013 New | JX Jupiter X Core artbees | 9.8 | Oct 28 | Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameter |
| CVE-2026-10511 New | JX Jupiter X Core artbees | 6.4 | Oct 27 | Jupiter X Core <= 4.61.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'forget_password_link' Parameter |
| CVE-2026-39490 | JC JupiterX Core artbees | 7.5 | Jun 16 | WordPress JupiterX Core plugin <= 4.14.1 - Broken Access Control vulnerability |
| CVE-2026-39491 | JC JupiterX Core artbees | 6.5 | Jun 15 | WordPress JupiterX Core plugin <= 4.14.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-3533 | JX Jupiter X Core artbees | 8.8 | Mar 23 | JupiterX Core <= 4.14.1 - Authenticated (Subscriber+) Missing Authorization To Limited File Upload via Popup Template Import |
| CVE-2025-50004 | JC JupiterX Core artbees | 8.8 | Jan 22 | WordPress JupiterX Core plugin <= 4.10.1 - PHP Object Injection vulnerability |
| CVE-2025-3888 | JX Jupiter X Core Artbees | 5.4 | May 17 | The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File inclusion in all versions up to, and including, 4.8.12 due to insufficient input… |
| CVE-2025-2105 | JX Jupiter X Core Artbees | 8.1 | Apr 26 | The Jupiter X Core plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.8.11 via deserialization of untrusted input from the 'file'… |
| CVE-2025-0366 | JX Jupiter X Core Artbees | 8.8 | Feb 1 | The Jupiter X Core plugin for WordPress is vulnerable to Local File Inclusion to Remote Code Execution in all versions up to, and including, 4.8.7 via the get_svg() function |
| CVE-2025-0365 | JX Jupiter X Core Artbees | 6.5 | Feb 1 | The Jupiter X Core plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.8.7 via the inline SVG feature |
| CVE-2024-12033 | JX Jupiter X Core artbees | 4.3 | Jan 7 | Jupiter X Core <= 4.8.5 - Missing Authorization to Authenticated Library Sync |
| CVE-2024-12316 | JX Jupiter X Core artbees | 5.3 | Jan 7 | Jupiter X Core <= 4.8.5 - Missing Authorization to Unauthenticated Popup Template Export |
| CVE-2023-38385 | JX Jupiter X Core Artbees | 8.8 | Dec 13 | Missing Authorization vulnerability in Artbees JupiterX Core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JupiterX Core: from 3.0.0… |
| CVE-2024-7781 | JX Jupiter X Core Artbees | 9.8 | Sep 26 | The Jupiter X Core plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 4.7.5 |
| CVE-2024-7772 | JX Jupiter X Core Artbees | 9.8 | Sep 26 | The Jupiter X Core plugin for WordPress is vulnerable to arbitrary file uploads due to a mishandled file type validation in the 'validate' function in all versions up to, and… |
| CVE-2023-38389 | JX Jupiter X Core Artbees | 9.8 | Jun 21 | Incorrect Authorization vulnerability in Artbees JupiterX Core allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JupiterX Core: from n/a through… |
| CVE-2023-38394 | JX Jupiter X Core Artbees | 8.8 | Jun 19 | Missing Authorization vulnerability in Artbees JupiterX Core.This issue affects JupiterX Core: from 3.0.0 through 3.3.0 |
| CVE-2024-4608 | SE Sellkit Artbees | 5.4 | Jun 6 | The SellKit – Funnel builder and checkout optimizer for WooCommerce to sell more, faster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter… |
| CVE-2023-32110 | JU Jupiterx Artbees | 8.8 | May 17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in artbees JupiterX allows PHP Local File Inclusion.This issue affects JupiterX: from… |
| CVE-2023-38388 | JX Jupiter X Core Artbees | 9.8 | Mar 26 | Unrestricted Upload of File with Dangerous Type vulnerability in Artbees JupiterX Core.This issue affects JupiterX Core: from n/a through 3.3.5 |
| CVE-2023-3813 | JX Jupiter X Core Artbees | 7.5 | Jul 21 | The Jupiter X Core plugin for WordPress is vulnerable to arbitrary file downloads in versions up to, and including, 4.6.6 |
| CVE-2022-1659 | JU Jupiterx Artbees | 7.3 | Jun 13 | Vulnerable versions of the JupiterX Core (<= 2.0.6) plugin register an AJAX action jupiterx_conditional_manager which can be used to call any function in the… |
| CVE-2022-1658 | JU Jupiter Artbees | 5.4 | Jun 13 | Vulnerable versions of the Jupiter Theme (<= 6.10.1) allow arbitrary plugin deletion by any authenticated user, including users with the subscriber role, via the abb_remove_plugin… |
| CVE-2022-1657 | JU Jupiterx Artbees | 8.8 | Jun 13 | Vulnerable versions of the Jupiter (<= 6.10.1) and JupiterX (<= 2.0.6) Themes allow logged-in users, including subscriber-level users, to perform Path Traversal and Local File… |
| CVE-2022-1654 | JU Jupiterx Artbees | 8.8 | Jun 13 | Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 allow any authenticated attacker, including a subscriber or customer-level attacker, to gain administrative privileges… |
| CVE-2022-1656 | JX Jupiter X Core Artbees | 5.4 | Jun 13 | Vulnerable versions of the JupiterX Theme (<=2.0.6) allow any logged-in user, including subscriber-level users, to access any of the functions registered in lib/api/api/ajax.php,… |