Critical · 9.8 CVE-2023-38389 EUVD-2023-42206GHSA-6hqp-gvp9-rmv9

WordPress Jupiter X Core plugin <= 3.3.8 - Unauthenticated Account Takeover vulnerability

Published Jun 21, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Incorrect Authorization vulnerability in Artbees JupiterX Core allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JupiterX Core: from n/a through 3.3.8.

Affected products

Vendor	Product	Affected	Fixed
Artbees	JupiterX Core	≤ 3.3.8	—

References

https://patchstack.com/database/vulnerability/jupiterx-core/wordpress-jupiter-x-core-plugin-3-3-0-unauthenticated-account-takeover-vulnerability?_s_id=cve vdb-entry