ArtBees Jupiter X Core

• CVE-2026-120555 Medium 5.3 Jupiter X Core <= 4.62.0 - Missing Authorization to Unauthenticated Limited File Download via 'file' Parameter –
• CVE-2026-120737 Medium 5.9 Jupiter X Core <= 4.62.0 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'archive_query' Parameter –
• CVE-2026-119219 Medium 5.4 Jupiter X Core <= 4.62.0 - Unauthenticated Stored Cross-Site Scripting via Raven Register Custom User Meta –
• CVE-2026-106013 Critical 9.8 Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameter 0.6%
• CVE-2026-10511 Medium 6.4 Jupiter X Core <= 4.61.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'forget_password_link' Parameter 0.2%
• CVE-2026-3533 High 8.8 JupiterX Core <= 4.14.1 - Authenticated (Subscriber+) Missing Authorization To Limited File Upload via Popup Template Import 0.7%
• CVE-2025-3888 Medium 6.4 Jupiterx Core <= 4.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Inline SVG 0.3%
• CVE-2025-2105 High 8.1 Jupiter X Core <= 4.8.11 - Unauthenticated PHP Object Injection via PHAR 0.8%
• CVE-2025-0365 Medium 6.5 Jupiterx Core <= 4.8.7 - Authenticated (Contributor+) Arbitrary File Read 0.7%
• CVE-2025-0366 High 8.8 Jupiter X Core <= 4.8.7 - Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution) 1.6%
• CVE-2024-12033 Medium 4.3 Jupiter X Core <= 4.8.5 - Missing Authorization to Authenticated Library Sync 0.3%
• CVE-2024-12316 Medium 5.3 Jupiter X Core <= 4.8.5 - Missing Authorization to Unauthenticated Popup Template Export 0.4%
• CVE-2024-7781 High 8.1 Jupiter X Core <= 4.7.5 - Limited Unauthenticated Authentication Bypass to Account Takeover 1.0%
• CVE-2024-7772 Critical 9.8 Jupiter X Core <= 4.6.5 - Unauthenticated Arbitrary File Upload 1.5%
• CVE-2023-3813 High 7.5 Jupiter X Core <= 4.6.6 - Unauthenticated Arbitrary File Download 1.2%
• CVE-2022-1659 Medium 5.4 JupiterX Core <= 2.0.6 - Information Disclosure, Modification, and Denial of Service 0.9%
• CVE-2022-1654 High 8.8 Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 - Authenticated Privilege Escalation 1.6%
• CVE-2022-1656 Medium 5.4 JupiterX Theme <= 2.0.6 and JupiterX Core <= 2.0.6 - Authenticated Arbitrary Plugin Deactivation and Settings Modification 0.5%