Skip to content
OpenAdvisories

Product · artbees

Jupiter X Core

18 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.8

    Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameter

    The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login handler in all versions up to and including 4.61.0. The vulnerability exists within the verify_twitter_callback function because after exchanging the…

  • Critical 9.8

    Jupiter X Core <= 4.6.5 - Unauthenticated Arbitrary File Upload

    The Jupiter X Core plugin for WordPress is vulnerable to arbitrary file uploads due to a mishandled file type validation in the 'validate' function in all versions up to, and including, 4.6.5. This makes it possible for unauthenticated attackers to upload arb…