Login Request a demo
JX
Product
Jupiter X Core
by artbees · last CVE Oct 28, 2026
17
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities17In the news0Timeline
Severity mix
Critical 5High 6Medium 6Low 0
Severity
All severities17Critical5High6Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jupiter X Core to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-3533
8.8
1%
Mar 23
JupiterX Core <= 4.14.1 - Authenticated (Subscriber+) Missing Authorization To Limited File Upload via Popup Template Import
Affected: through 4.14.1
CVE-2025-0366
8.8
2%
Feb 1
Jupiter X Core <= 4.8.7 - Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution)
Affected: through 4.8.7
CVE-2023-38385
8.8
1%
Dec 13
WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability
Affected: 3.0.0 before 3.3.5
CVE-2023-38394
8.8
0%
Jun 19
Missing Authorization vulnerability in Artbees JupiterX Core.This issue affects JupiterX Core: from 3.0.0 through 3.3.0
Affected: 3.0.0 before 3.3.5
CVE-2025-2105
8.1
1%
Apr 26
Jupiter X Core <= 4.8.11 - Unauthenticated PHP Object Injection via PHAR
Affected: through 4.8.11
CVE-2023-3813
7.5
1%
Jul 21
The Jupiter X Core plugin for WordPress is vulnerable to arbitrary file downloads in versions up to, and including, 4.6.6
Affected: through 2.5.0
Showing 6