Approved changes feed: RSS · Atom

cpe:2.3:a:artbees:jupiterx_core:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorArtbees (d97133e8-eac9-55a9-afb7-f9bb6c27270c)
ProductJupiterx Core (e556edf4-fcdf-5ce0-ba55-e8106bd822ee)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-58264 vulnerable 2026-06-08 07:35:17.555055 WordPress JupiterX Core Plugin <= 4.11.0 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in artbees JupiterX Core jupiterx-core allows Stored XSS.This issue affects JupiterX Core: from n/a through <= 4.11.0.
Published: 2025-09-22T18:23:19.209Z
Updated: 2026-05-12T01:03:49.259Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-50004 vulnerable 2026-06-08 07:29:17.655477 WordPress JupiterX Core plugin <= 4.10.1 - PHP Object Injection vulnerability
HIGH (8.8)
Deserialization of Untrusted Data vulnerability in artbees JupiterX Core jupiterx-core allows Object Injection.This issue affects JupiterX Core: from n/a through <= 4.10.1.
Published: 2026-01-22T16:51:44.164Z
Updated: 2026-04-28T16:13:15.821Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47475 vulnerable 2026-06-08 07:27:14.439747 WordPress JupiterX Core plugin <= 4.8.11 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in artbees JupiterX Core jupiterx-core allows Stored XSS.This issue affects JupiterX Core: from n/a through <= 4.8.11.
Published: 2025-05-07T14:19:45.866Z
Updated: 2026-04-28T16:12:42.161Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38394 vulnerable 2026-06-08 06:08:17.806107 WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in Artbees JupiterX Core.This issue affects JupiterX Core: from 3.0.0 through 3.3.0.
Published: 2024-06-19T14:14:18.320Z
Updated: 2026-04-28T16:08:33.771Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38389 vulnerable 2026-06-08 06:08:17.797173 WordPress Jupiter X Core plugin <= 3.3.8 - Unauthenticated Account Takeover vulnerability
CRITICAL (9.8)
Incorrect Authorization vulnerability in Artbees JupiterX Core allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JupiterX Core: from n/a through 3.3.8.
Published: 2024-06-21T15:58:28.347Z
Updated: 2026-04-28T16:08:33.865Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38388 vulnerable 2026-06-08 06:08:17.796777 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38385 vulnerable 2026-06-08 06:08:17.791614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.