CVE-2023-38385

CVE-2023-38385 affects WordPress JupiterX Core plugin (versions 3.0.0–3.3.0). The root cause is Missing Authorization, i.e., an incorrectly configured access control security level that allows unauthorized access. CVSS v3.1 metrics indicate Attack Vector: Network, Attack Complexity: Low, Privileg...

WordPress plugin JupiterX Core 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-12722 · Unknown · Jupiter X Core

Name of the Vulnerable Software and Affected Versions: JupiterX Core versions 3.0.0 through 3.3.0 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. This results in broken access control...

WordPress Jupiter X Core plugin <= 4.6.5 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Geo Void in WordPress Plugin JupiterX Core versions = 4.6.5...

WordPress Jupiter X Core plugin <= 4.7.5 - Limited Unauthenticated Authentication Bypass to Account Takeover vulnerability

Limited Unauthenticated Authentication Bypass to Account Takeover vulnerability discovered by Geo Void in WordPress Plugin JupiterX Core versions = 4.7.5...

WordPress JupiterX Core Plugin <= 4.7.5 is vulnerable to Broken Authentication

Software JupiterX Core Type Plugin Vulnerable versions = 4.7.5 Fixed in 4.7.8 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-7781 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 4950f50fad7a Credits Geo Void...

WordPress JupiterX Core Plugin <= 4.6.5 is vulnerable to Arbitrary File Upload

Software JupiterX Core Type Plugin Vulnerable versions = 4.6.5 Fixed in 4.6.6 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2024-7772 Patch priority High CVSS severity High 10 Developer Claim ownership PSID ab3838034ebf Credits Geo Void Required privilege Unauthenticated...

CVE-2023-38389

Incorrect Authorization vulnerability in Artbees JupiterX Core allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JupiterX Core: from n/a through 3.3.8...

CVE-2023-38389

Incorrect Authorization vulnerability in Artbees JupiterX Core allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JupiterX Core: from n/a through 3.3.8...

CVE-2023-38389 WordPress Jupiter X Core plugin <= 3.3.8 - Unauthenticated Account Takeover vulnerability

Incorrect Authorization vulnerability in Artbees JupiterX Core allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JupiterX Core: from n/a through 3.3.8...

WordPress plugin JupiterX Core security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security...

CVE-2023-38394

Missing Authorization vulnerability in Artbees JupiterX Core.This issue affects JupiterX Core: from 3.0.0 through 3.3.0...

CVE-2023-38394

Missing Authorization vulnerability in Artbees JupiterX Core.This issue affects JupiterX Core: from 3.0.0 through 3.3.0...

CVE-2023-38394

CVE-2023-38394 affects JupiterX Core plugin for WordPress (versions 3.0.0–3.3.0). The underlying issue is Missing Authorization / Broken Access Control, allowing access to restricted functionality for subscribers. Patch or mitigation: update JupiterX Core to 3.3.5 or newer, which fixes the vulner...

CVE-2023-38394 WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability

Missing Authorization vulnerability in Artbees JupiterX Core.This issue affects JupiterX Core: from 3.0.0 through 3.3.0...

PT-2024-12723 · Artbees · Artbees Jupiterx Core

Name of the Vulnerable Software and Affected Versions: Artbees JupiterX Core versions 3.0.0 through 3.3.0 Description: The issue is related to a Missing Authorization vulnerability in Artbees JupiterX Core. Recommendations: For versions 3.0.0 through 3.3.0, update to a version that contains a fix...

WordPress plugin JupiterX Core security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2023-32110

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in artbees JupiterX allows PHP Local File Inclusion.This issue affects JupiterX: from n/a through 3.0.0...

CVE-2023-32110

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in artbees JupiterX allows PHP Local File Inclusion.This issue affects JupiterX: from n/a through 3.0.0...

CVE-2023-32110 WordPress JupiterX theme <= 3.0.0 - Auth. Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in artbees JupiterX allows PHP Local File Inclusion.This issue affects JupiterX: from n/a through 3.0.0...