High · 8.8 CVE-2025-50004 EUVD-2026-4113GHSA-6c5m-7jp2-vf55

WordPress JupiterX Core plugin <= 4.10.1 - PHP Object Injection vulnerability

Published Jan 22, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Deserialization of Untrusted Data vulnerability in artbees JupiterX Core jupiterx-core allows Object Injection.This issue affects JupiterX Core: from n/a through <= 4.10.1.

Affected products

Vendor	Product	Affected	Fixed
artbees	JupiterX Core	≤ 4.10.1	—

References

https://patchstack.com/database/Wordpress/Plugin/jupiterx-core/vulnerability/wordpress-jupiterx-core-plugin-4-10-1-php-object-injection-vulnerability?_s_id=cve vdb-entry