Jupiter X Core <= 4.6.6 - Unauthenticated Arbitrary File Download

Wordfence Intelligence   >   Vulnerability Database   >   Jupiter X Core <= 4.6.6 - Unauthenticated Arbitrary File Download
7.5
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE CVE-2023-3813
CVSS 7.5 (High)
Publicly Published July 20, 2023
Last Updated September 19, 2024
Researcher István Márton - Wordfence

Description

The Jupiter X Core plugin for WordPress is vulnerable to arbitrary file downloads in versions up to, and including, 4.6.6. This makes it possible for unauthenticated attackers to download the contents of arbitrary files on the server, which can contain sensitive information. The requires the premium version of the plugin to be activated. NOTE: This vulnerability was partially patched in version 4.6.5 and fully patched in version 4.6.9.

References

Share

Vulnerability Details for Jupiter X Core

Jupiter X Core

Software Type Plugin
Software Slug jupiterx-core (view on wordpress.org)
Patched? Yes
Remediation Update to version 4.6.9, or a newer patched version
Affected Version
  • <= 4.6.6
Patched Version
  • 4.6.9

Recent vulnerabilities in Jupiter X Core

Jupiter X Core <= 4.14.1 - Missing Authorization
5.3
CVE-2026-39490
Apr 20, 2026
Researcher: hivesec
Jupiter X Core <= 4.14.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
6.4
CVE-2026-39491
Apr 13, 2026
Researcher: Nguyen Ba Khanh
JupiterX Core <= 4.14.1 - Authenticated (Subscriber+) Missing Authorization To Limited File Upload via Popup Template Import
8.8
CVE-2026-3533
Mar 23, 2026
Researcher: Jack Pas (Dark.)
JupiterX Core <= 4.10.1 - Authenticated (Contributor+) PHP Object Injection
7.5
CVE-2025-50004
Jan 12, 2026
Researcher: João Pedro Soares de Alcântara
JupiterX Core <= 4.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-58264
Sep 22, 2025
Researcher: Michael
Jupiterx Core <= 4.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Inline SVG
6.4
CVE-2025-3888
May 16, 2025
Researcher: stealthcopter
JupiterX Core <= 4.8.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-47475
May 7, 2025
Researcher: Michael
Jupiter X Core <= 4.8.11 - Unauthenticated PHP Object Injection via PHAR
8.1
CVE-2025-2105
Apr 25, 2025
Researcher: Phat RiO
Jupiterx Core <= 4.8.7 - Authenticated (Contributor+) Arbitrary File Read
6.5
CVE-2025-0365
Jan 31, 2025
Researcher: stealthcopter
Jupiter X Core <= 4.8.7 - Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution)
8.8
CVE-2025-0366
Jan 31, 2025
Researcher: stealthcopter
# Title CVE ID CVSS Researchers Date
1 Jupiter X Core <= 4.14.1 - Missing Authorization CVE-2026-39490 5.3 hivesec April 20, 2026
2 Jupiter X Core <= 4.14.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2026-39491 6.4 Nguyen Ba Khanh April 13, 2026
3 JupiterX Core <= 4.14.1 - Authenticated (Subscriber+) Missing Authorization To Limited File Upload via Popup Template Import CVE-2026-3533 8.8 Jack Pas (Dark.) March 23, 2026
4 JupiterX Core <= 4.10.1 - Authenticated (Contributor+) PHP Object Injection CVE-2025-50004 7.5 João Pedro Soares de Alcântara January 12, 2026
5 JupiterX Core <= 4.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-58264 6.4 Michael September 22, 2025
6 Jupiterx Core <= 4.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Inline SVG CVE-2025-3888 6.4 stealthcopter May 16, 2025
7 JupiterX Core <= 4.8.11 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-47475 6.4 Michael May 7, 2025
8 Jupiter X Core <= 4.8.11 - Unauthenticated PHP Object Injection via PHAR CVE-2025-2105 8.1 Phat RiO April 25, 2025
9 Jupiterx Core <= 4.8.7 - Authenticated (Contributor+) Arbitrary File Read CVE-2025-0365 6.5 stealthcopter January 31, 2025
10 Jupiter X Core <= 4.8.7 - Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution) CVE-2025-0366 8.8 stealthcopter January 31, 2025
View more vulnerabilities in this software package View more vulnerabilities

This record contains material that is subject to copyright.

Copyright 2012-2026 Defiant Inc.

License: Defiant hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute this software vulnerability information. Any copy of the software vulnerability information you make for such purposes is authorized provided that you include a hyperlink to this vulnerability record and reproduce Defiant's copyright designation and this license in any such copy. Read more.

Copyright 1999-2026 The MITRE Corporation

License: CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. Read more.

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation