AArtBees

Products

Exploited and recent CVEs

• CVE-2026-120555 Medium 5.3 Jupiter X Core <= 4.62.0 - Missing Authorization to Unauthenticated Limited File Download via 'file' Parameter –
• CVE-2026-120737 Medium 5.9 Jupiter X Core <= 4.62.0 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'archive_query' Parameter –
• CVE-2026-119219 Medium 5.4 Jupiter X Core <= 4.62.0 - Unauthenticated Stored Cross-Site Scripting via Raven Register Custom User Meta –
• CVE-2026-106013 Critical 9.8 Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameter 0.6%
• CVE-2026-10511 Medium 6.4 Jupiter X Core <= 4.61.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'forget_password_link' Parameter 0.2%
• CVE-2026-39490 High 7.5 WordPress JupiterX Core plugin <= 4.14.1 - Broken Access Control vulnerability 0.3%
• CVE-2026-39491 Medium 6.5 WordPress JupiterX Core plugin <= 4.14.1 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2026-3533 High 8.8 JupiterX Core <= 4.14.1 - Authenticated (Subscriber+) Missing Authorization To Limited File Upload via Popup Template Import 0.7%
• CVE-2025-50004 High 8.8 WordPress JupiterX Core plugin <= 4.10.1 - PHP Object Injection vulnerability 0.8%
• CVE-2025-58264 Medium 6.5 WordPress JupiterX Core Plugin <= 4.11.0 - Cross Site Scripting (XSS) Vulnerability 0.2%
• CVE-2025-3888 Medium 6.4 Jupiterx Core <= 4.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Inline SVG 0.3%
• CVE-2025-47475 Medium 6.5 WordPress JupiterX Core plugin <= 4.8.11 - Cross Site Scripting (XSS) Vulnerability 0.3%
• CVE-2025-2105 High 8.1 Jupiter X Core <= 4.8.11 - Unauthenticated PHP Object Injection via PHAR 0.8%
• CVE-2025-0365 Medium 6.5 Jupiterx Core <= 4.8.7 - Authenticated (Contributor+) Arbitrary File Read 0.7%
• CVE-2025-0366 High 8.8 Jupiter X Core <= 4.8.7 - Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution) 1.6%
• CVE-2024-12033 Medium 4.3 Jupiter X Core <= 4.8.5 - Missing Authorization to Authenticated Library Sync 0.3%
• CVE-2024-12316 Medium 5.3 Jupiter X Core <= 4.8.5 - Missing Authorization to Unauthenticated Popup Template Export 0.4%
• CVE-2023-38385 High 8.3 WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability 0.6%
• CVE-2024-7781 High 8.1 Jupiter X Core <= 4.7.5 - Limited Unauthenticated Authentication Bypass to Account Takeover 1.0%
• CVE-2024-7772 Critical 9.8 Jupiter X Core <= 4.6.5 - Unauthenticated Arbitrary File Upload 1.5%
• CVE-2023-38389 Critical 9.8 WordPress Jupiter X Core plugin <= 3.3.8 - Unauthenticated Account Takeover vulnerability 1.4%
• CVE-2023-38394 Medium 5.4 WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability 0.4%
• CVE-2024-4608 Medium 6.4 SellKit – Funnel builder and checkout optimizer for WooCommerce to sell more, faster <= 1.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter 0.3%
• CVE-2024-30509 Medium 6.5 WordPress SellKit plugin <= 1.8.1 - Arbitrary File Download vulnerability 0.6%
• CVE-2023-32110 High 7.6 WordPress JupiterX theme <= 3.0.0 - Auth. Local File Inclusion vulnerability 0.8%
• CVE-2023-38388 Critical 9.0 WordPress Jupiter X Core plugin <= 3.3.5 - Unauth. Arbitrary File Upload vulnerability 1.7%
• CVE-2023-3813 High 7.5 Jupiter X Core <= 4.6.6 - Unauthenticated Arbitrary File Download 1.2%
• CVE-2022-1659 Medium 5.4 JupiterX Core <= 2.0.6 - Information Disclosure, Modification, and Denial of Service 0.9%
• CVE-2022-1654 High 8.8 Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 - Authenticated Privilege Escalation 1.6%
• CVE-2022-1654 High 8.8 Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 - Authenticated Privilege Escalation 1.6%