← WordPress Vulnerabilities
WordPress security by component

Jupiter X Core

Jupiter X Core is a WordPress component with 4 published CVE records in this archive. The latest tracked vulnerability was published Feb 01, 2025; the highest CVE/CNA score is 8.8.

Plugin slug: jupiter-x-core

CVE-2025-0366: Jupiter X Core: Filesystem traversal

Jupiter X Core is affected by filesystem traversal. Exploitation requires at least contributor-level access. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.

PublishedFeb 01, 2025
Safe version guidanceSee mitigation notes
Safe version
Feb 01, 2025 CVE-2025-0366
Jupiter X Core: Filesystem traversal
Jupiter X Core is affected by filesystem traversal. Exploitation requires at least contributor-level access. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
See mitigation notes
CVE8.8
NVDPending
Feb 01, 2025 CVE-2025-0365
Jupiter X Core: Filesystem traversal
Jupiter X Core is affected by filesystem traversal. Exploitation requires at least contributor-level access. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
See mitigation notes
CVE6.5
NVDPending
Jan 07, 2025 CVE-2024-12033
Jupiter X Core: A security weakness
Jupiter X Core is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.3
NVDPending
Dec 13, 2024 CVE-2023-38385
JupiterX Core: A security weakness
JupiterX Core is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE8.3
NVD8.8