Artbees vulnerabilities
32 CVEs and advisories name Artbees as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-120555Jupiter X Core <= 4.62.0 - Missing Authorization to Unauthenticated Limited File Download via 'file' Parameter
- CVE-2026-120737Jupiter X Core <= 4.62.0 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'archive_query' Parameter
- CVE-2026-119219Jupiter X Core <= 4.62.0 - Unauthenticated Stored Cross-Site Scripting via Raven Register Custom User Meta
- CVE-2026-106013Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameter
- CVE-2026-10511Jupiter X Core <= 4.61.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'forget_password_link' Parameter
- CVE-2026-39490WordPress JupiterX Core plugin <= 4.14.1 - Broken Access Control vulnerability
- CVE-2026-39491WordPress JupiterX Core plugin <= 4.14.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-3533JupiterX Core <= 4.14.1 - Authenticated (Subscriber+) Missing Authorization To Limited File Upload via Popup Template Import
- CVE-2025-50004WordPress JupiterX Core plugin <= 4.10.1 - PHP Object Injection vulnerability
- CVE-2025-58264WordPress JupiterX Core Plugin <= 4.11.0 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-3888Jupiterx Core <= 4.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Inline SVG
- CVE-2025-47475WordPress JupiterX Core plugin <= 4.8.11 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-2105Jupiter X Core <= 4.8.11 - Unauthenticated PHP Object Injection via PHAR
- CVE-2025-0365Jupiterx Core <= 4.8.7 - Authenticated (Contributor+) Arbitrary File Read
- CVE-2025-0366Jupiter X Core <= 4.8.7 - Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution)
- CVE-2024-12033Jupiter X Core <= 4.8.5 - Missing Authorization to Authenticated Library Sync
- CVE-2024-12316Jupiter X Core <= 4.8.5 - Missing Authorization to Unauthenticated Popup Template Export
- CVE-2023-38385WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability
- CVE-2024-7781Jupiter X Core <= 4.7.5 - Limited Unauthenticated Authentication Bypass to Account Takeover
- CVE-2024-7772Jupiter X Core <= 4.6.5 - Unauthenticated Arbitrary File Upload
- CVE-2023-38389WordPress Jupiter X Core plugin <= 3.3.8 - Unauthenticated Account Takeover vulnerability
- CVE-2023-38394WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability
- CVE-2024-4608SellKit – Funnel builder and checkout optimizer for WooCommerce to sell more, faster <= 1.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
- CVE-2024-30509WordPress SellKit plugin <= 1.8.1 - Arbitrary File Download vulnerability
- CVE-2023-32110WordPress JupiterX theme <= 3.0.0 - Auth. Local File Inclusion vulnerability
- CVE-2023-38388WordPress Jupiter X Core plugin <= 3.3.5 - Unauth. Arbitrary File Upload vulnerability
- CVE-2023-3813Jupiter X Core <= 4.6.6 - Unauthenticated Arbitrary File Download
- CVE-2022-1659JupiterX Core <= 2.0.6 - Information Disclosure, Modification, and Denial of Service
- CVE-2022-1654Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 - Authenticated Privilege Escalation
- CVE-2022-1658Jupiter Theme <= 6.10.1 - Authenticated Arbitrary Plugin Deletion