CVE-2023-38389 WordPress Jupiter X Core plugin <= 3.3.8 - Unauthenticated Account Takeover vulnerability

Incorrect Authorization vulnerability in Artbees JupiterX Core allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JupiterX Core: from n/a through 3.3.8...

CVE-2023-38389: Incorrect Authorization

Incorrect Authorization vulnerability in Artbees JupiterX Core allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JupiterX Core: from n/a through 3.3.8...

CVE-2023-38394

Missing Authorization vulnerability in Artbees JupiterX Core.This issue affects JupiterX Core: from 3.0.0 through 3.3.0...

CVE-2023-38394

Missing Authorization vulnerability in Artbees JupiterX Core.This issue affects JupiterX Core: from 3.0.0 through 3.3.0...

CVE-2023-38394

CVE-2023-38394 affects JupiterX Core plugin for WordPress (versions 3.0.0–3.3.0). The underlying issue is Missing Authorization / Broken Access Control, allowing access to restricted functionality for subscribers. Patch or mitigation: update JupiterX Core to 3.3.5 or newer, which fixes the vulner...

PT-2024-12723 · Artbees · Artbees Jupiterx Core

Name of the Vulnerable Software and Affected Versions: Artbees JupiterX Core versions 3.0.0 through 3.3.0 Description: The issue is related to a Missing Authorization vulnerability in Artbees JupiterX Core. Recommendations: For versions 3.0.0 through 3.3.0, update to a version that contains a fix...

CVE-2023-38394: Missing Authorization

Missing Authorization vulnerability in Artbees JupiterX Core.This issue affects JupiterX Core: from 3.0.0 through 3.3.0...

CVE-2024-30509

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Artbees SellKit allows Relative Path Traversal.This issue affects SellKit: from n/a through 1.8.1...

CVE-2024-30509 WordPress SellKit plugin <= 1.8.1 - Arbitrary File Download vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Artbees SellKit allows Relative Path Traversal.This issue affects SellKit: from n/a through 1.8.1...

CVE-2024-30509

CVE-2024-30509 corresponds to a WordPress SellKit vulnerability (

CVE-2023-32110

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in artbees JupiterX allows PHP Local File Inclusion.This issue affects JupiterX: from n/a through 3.0.0...

CVE-2024-30509: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Artbees SellKit allows Relative Path Traversal.This issue affects SellKit: from n/a through 1.8.1...

PT-2024-23436

Name of the Vulnerable Software and Affected Versions Artbees SellKit versions n/a through 1.8.1 Description The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal' vulnerability, in Artbees SellKit. This allows Relative Path Traversa...

CVE-2023-32110: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in artbees JupiterX allows PHP Local File Inclusion.This issue affects JupiterX: from n/a through 3.0.0...

CVE-2023-38388

Unrestricted Upload of File with Dangerous Type vulnerability in Artbees JupiterX Core.This issue affects JupiterX Core: from n/a through 3.3.5...

CVE-2023-38388

Unrestricted Upload of File with Dangerous Type vulnerability in Artbees JupiterX Core.This issue affects JupiterX Core: from n/a through 3.3.5...

CVE-2023-38388 WordPress Jupiter X Core plugin <= 3.3.5 - Unauth. Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Artbees JupiterX Core.This issue affects JupiterX Core: from n/a through 3.3.5...

CVE-2023-38388: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in Artbees JupiterX Core.This issue affects JupiterX Core: from n/a through 3.3.5...

PT-2023-4921

Name of the Vulnerable Software and Affected Versions Artbees JupiterX Core versions n/a through 3.3.8 Description The issue is related to incorrect authorization in Artbees JupiterX Core, allowing access to functionality not properly constrained by ACLs. This can be exploited by a remote attacke...

Critical Privilege Escalation Vulnerability in Jupiter and JupiterX Premium Themes

On April 5, 2022, the Wordfence Threat Intelligence team initiated the responsible disclosure process for a set of vulnerabilities in the Jupiter and JupiterX Premium themes and the required JupiterX Core companion plugin for WordPress, which included a critical privilege escalation vulnerability...