Malicious Firefox extensions impersonate popular crypto wallets

Socket’s threat researchers found three malicious Firefox extensions that impersonated the Phantom, Jupiter, and Bitget crypto wallets. Once installed, the malicious extensions stole recovery phrases and private keys, which would provide the attacker with full control of a wallet. A crypto wallet...

CVE-2026-106013

The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login handler in all versions up to and including 4.61.0. The vulnerability exists within the verifytwittercallback function because after exchanging the visitor's oauthverifier for their acces...

CVE-2026-106013 Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameter

The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login handler in all versions up to and including 4.61.0. The vulnerability exists within the verifytwittercallback function because after exchanging the visitor's oauthverifier for their acces...

CVE-2026-106013

The Jupiter X Core plugin for WordPress (versions

CVE-2026-106013 Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameter

The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login handler in all versions up to and including 4.61.0. The vulnerability exists within the verifytwittercallback function because after exchanging the visitor's oauthverifier for their acces...

EUVD-2026-111538

The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login handler in all versions up to and including 4.61.0. The vulnerability exists within the verifytwittercallback function because after exchanging the visitor's oauthverifier for their acces...

CVE-2026-106013: artbees Jupiter X Core: The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login handler…

The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login handler in all versions up to and including 4.61.0. The vulnerability exists within the verifytwittercallback function because after exchanging the visitor's oauthverifier for their acces...

PT-2026-127312

The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login handler in all versions up to and including 4.61.0. The vulnerability exists within the verify twitter callback function because after exchanging the visitor's oauth verifier for their...

WordPress Jupiter X Core authorization issue vulnerability

WordPress Jupiter X Core versions 4.61.0 and earlier contain an authorization issue vulnerability. This vulnerability arises because the verifytwittercallback function within the Twitter/X social login handler fails to call setOauthToken after exchanging access tokens; as a result, authentication...

WordPress Jupiter X Core plugin <= 4.61.0 - Unauthenticated Authentication Bypass vulnerability

Unauthenticated Authentication Bypass vulnerability discovered by daroo in WordPress Plugin JupiterX Core versions = 4.61.0...

CVE-2026-10511

The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'forgetpasswordlink' parameter in all versions up to, and including, 4.61.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

EUVD-2026-110624

The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'forgetpasswordlink' parameter in all versions up to, and including, 4.61.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-10511 Jupiter X Core <= 4.61.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'forget_password_link' Parameter

The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'forgetpasswordlink' parameter in all versions up to, and including, 4.61.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-10511

The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 4.61.0 . The flaw originates from insufficient input sanitization and output escaping specifically within the 'forget_password_link' parameter. An authenticated attacker with...

CVE-2026-10511 Jupiter X Core <= 4.61.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'forget_password_link' Parameter

The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'forgetpasswordlink' parameter in all versions up to, and including, 4.61.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

WordPress Jupiter X Core cross-site scripting vulnerability

WordPress Jupiter X Core versions 4.61.0 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from improper input sanitization and insufficient output escaping for the ‘forgetpasswordlink’ parameter, potentially enabling stored cross-site scripting attacks...

PT-2026-125889

The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'forget password link' parameter in all versions up to, and including, 4.61.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

WordPress Jupiter X Core plugin <= 4.61.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by theviper17y in WordPress Plugin JupiterX Core versions = 4.61.0...

Malicious Package

Overview lint-cassini-metalsmith-jupiter is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

Malicious code in lint-cassini-metalsmith-jupiter (npm)

Source: amazon-inspector 6b4b2a23fb9c62a119ab9c0e8750246e8d4d015ca5b2da5e50221be5da0c3609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...