AR
Vendor
artbees
37
CVEs
0
On KEV
2
New 30D
Products
JX9.8
Jupiter X Core
artbees
17 CVEs0 on KEV2 new
JC9.8
JupiterX Core
artbees
9 CVEs0 on KEV0 new
JU8.8
JupiterX
artbees
5 CVEs0 on KEV0 new
JU8.8
Jupiter
Artbees
3 CVEs0 on KEV0 new
SE6.5
SellKit
Artbees
2 CVEs0 on KEV0 new
SF5.4
SellKit – Funnel builder and checkout optimizer for WooCommerce to sell more, faster
artbees
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-106013 New | JX Jupiter X Core artbees | 9.8 | Oct 28 | Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameter |
| CVE-2026-10511 New | JX Jupiter X Core artbees | 6.4 | Oct 27 | Jupiter X Core <= 4.61.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'forget_password_link' Parameter |
| CVE-2026-39490 | JC JupiterX Core artbees | 7.5 | Jun 16 | WordPress JupiterX Core plugin <= 4.14.1 - Broken Access Control vulnerability |
| CVE-2026-39491 | JC JupiterX Core artbees | 6.5 | Jun 15 | WordPress JupiterX Core plugin <= 4.14.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-3533 | JX Jupiter X Core artbees | 8.8 | Mar 23 | JupiterX Core <= 4.14.1 - Authenticated (Subscriber+) Missing Authorization To Limited File Upload via Popup Template Import |
| CVE-2025-50004 | JC JupiterX Core artbees | 8.8 | Jan 22 | WordPress JupiterX Core plugin <= 4.10.1 - PHP Object Injection vulnerability |
| CVE-2025-58264 | JC JupiterX Core artbees | 6.5 | Sep 22 | WordPress JupiterX Core Plugin <= 4.11.0 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-3888 | JX Jupiter X Core artbees | 5.4 | May 17 | Jupiterx Core <= 4.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Inline SVG |
| CVE-2025-47475 | JC JupiterX Core artbees | 6.5 | May 7 | WordPress JupiterX Core plugin <= 4.8.11 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-2105 | JX Jupiter X Core artbees | 8.1 | Apr 26 | Jupiter X Core <= 4.8.11 - Unauthenticated PHP Object Injection via PHAR |
| CVE-2025-0365 | JX Jupiter X Core artbees | 6.5 | Feb 1 | Jupiterx Core <= 4.8.7 - Authenticated (Contributor+) Arbitrary File Read |
| CVE-2025-0366 | JX Jupiter X Core artbees | 8.8 | Feb 1 | Jupiter X Core <= 4.8.7 - Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution) |
| CVE-2024-12033 | JX Jupiter X Core artbees | 4.3 | Jan 7 | Jupiter X Core <= 4.8.5 - Missing Authorization to Authenticated Library Sync |
| CVE-2024-12316 | JX Jupiter X Core artbees | 5.3 | Jan 7 | Jupiter X Core <= 4.8.5 - Missing Authorization to Unauthenticated Popup Template Export |
| CVE-2023-38385 | JC JupiterX Core Artbees | 8.8 | Dec 13 | WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability |
| CVE-2024-7781 | JX Jupiter X Core artbees | 9.8 | Sep 26 | Jupiter X Core <= 4.7.5 - Limited Unauthenticated Authentication Bypass to Account Takeover |
| CVE-2024-7772 | JX Jupiter X Core artbees | 9.8 | Sep 26 | Jupiter X Core <= 4.6.5 - Unauthenticated Arbitrary File Upload |
| CVE-2023-38389 | JC JupiterX Core Artbees | 9.8 | Jun 21 | WordPress Jupiter X Core plugin <= 3.3.8 - Unauthenticated Account Takeover vulnerability |
| CVE-2023-38394 | JC JupiterX Core Artbees | 8.8 | Jun 19 | WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability |
| CVE-2024-4608 | SF SellKit – Funnel builder and checkout optimizer for WooCommerce to sell more, faster artbees | 5.4 | Jun 6 | SellKit – Funnel builder and checkout optimizer for WooCommerce to sell more, faster <= 1.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter |
| CVE-2024-30509 | SE SellKit Artbees | 6.5 | May 17 | WordPress SellKit plugin <= 1.8.1 - Arbitrary File Download vulnerability |
| CVE-2023-32110 | JU JupiterX artbees | 8.8 | May 17 | WordPress JupiterX theme <= 3.0.0 - Auth. Local File Inclusion vulnerability |
| CVE-2023-38388 | JC JupiterX Core Artbees | 9.8 | Mar 26 | WordPress Jupiter X Core plugin <= 3.3.5 - Unauth. Arbitrary File Upload vulnerability |
| CVE-2023-3813 | JX Jupiter X Core artbees | 7.5 | Jul 21 | Jupiter X Core <= 4.6.6 - Unauthenticated Arbitrary File Download |
| CVE-2022-1659 | JU Jupiterx Artbees | 7.3 | Jun 13 | Vulnerable versions of the JupiterX Core (<= 2.0.6) plugin register an AJAX action jupiterx_conditional_manager which can be used to call any function in the… |
| CVE-2022-1658 | JU Jupiter Artbees | 5.4 | Jun 13 | Vulnerable versions of the Jupiter Theme (<= 6.10.1) allow arbitrary plugin deletion by any authenticated user, including users with the subscriber role, via the abb_remove_plugin… |
| CVE-2022-1657 | JU Jupiterx Artbees | 8.8 | Jun 13 | Vulnerable versions of the Jupiter (<= 6.10.1) and JupiterX (<= 2.0.6) Themes allow logged-in users, including subscriber-level users, to perform Path Traversal and Local File… |
| CVE-2022-1654 | JU Jupiterx Artbees | 8.8 | Jun 13 | Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 allow any authenticated attacker, including a subscriber or customer-level attacker, to gain administrative privileges… |
| CVE-2022-1656 | JX Jupiter X Core Artbees | 5.4 | Jun 13 | Vulnerable versions of the JupiterX Theme (<=2.0.6) allow any logged-in user, including subscriber-level users, to access any of the functions registered in lib/api/api/ajax.php,… |