Jupiter X Core vulnerabilities and CVEs

Known vulnerabilities affecting Jupiter X Core, with exploit availability attached to each one, so you can tell a flaw someone has written code for from one nobody has.

3 vulnerabilities tracked.

5.9 The Jupiter X Core plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.62.0 This is due to… CVE-2026-120737 7 Nov 2026
5.4 The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fields[ ]' parameter in all versions up to,… CVE-2026-119219 7 Nov 2026
5.3 The Jupiter X Core plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.62.0 via the 'file'… CVE-2026-120555 7 Nov 2026

What this covers

This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that Jupiter X Core is free of vulnerabilities.

Query this from an agent over MCP · Check a lockfile by version

Other products tracked here