JupiterX Core
artbees
Developer
4.14.2
Latest version
80,000
Installations
No date
Last updated
Vulnerability history
0 present
21 patched
15 Mitigation rules
- Cross Site Scripting (XSS) vulnerability<= 4.14.14 days ago
- Authenticated (Subscriber+) Missing Authorization To Limited File Upload via Popup Template Import vulnerability<= 4.14.124/03/2026
- PHP Object Injection vulnerability<= 4.10.112/01/2026
- Cross Site Scripting (XSS) Vulnerability<= 4.11.022/09/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Inline SVG vulnerability<= 4.8.1216/05/2025
- Cross Site Scripting (XSS) Vulnerability<= 4.8.1107/05/2025
- Unauthenticated PHP Object Injection via PHAR vulnerability<= 4.8.1125/04/2025
- Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution) vulnerability<= 4.8.731/01/2025
- Authenticated (Contributor+) Arbitrary File Read vulnerability<= 4.8.731/01/2025
- Missing Authorization to Unauthenticated Popup Template Export vulnerability<= 4.8.507/01/2025
- Missing Authorization to Authenticated Library Sync vulnerability<= 4.8.507/01/2025
- Unauthenticated Arbitrary File Upload vulnerability<= 4.6.526/09/2024
- Limited Unauthenticated Authentication Bypass to Account Takeover vulnerability<= 4.7.526/09/2024
- Unauth. Arbitrary File Upload vulnerability<= 3.3.522/08/2023
- Unauthenticated Account Takeover vulnerability<= 3.3.822/08/2023
- Multiple Auth. Broken Access Control vulnerability3.0.0-3.3.013/08/2023
- Multiple Auth. Broken Access Control vulnerability3.0.0-3.3.013/08/2023
- Unauth. Arbitrary File Download vulnerability<= 4.6.620/07/2023
- Authenticated Privilege Escalation and Post deletion vulnerability<= 2.0.718/05/2022
- Insufficient Access Control leading to Authenticated Arbitrary Plugin Deactivation and Settings Modification<= 2.0.618/05/2022
- Information Disclosure, Modification, and Denial of Service (DoS) vulnerabilities<= 2.0.618/05/2022