CVE-2026-120737

The Jupiter X Core plugin for WordPress (versions up to and including 4.62.0 ) is vulnerable to an authorization bypass leading to sensitive information disclosure. The root cause is the plugin's failure to properly verify user authorization for actions involving the archive_query parameter. Unau...