Every CVE whose affected-product data names Artbees Jupiterx, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (5)
CVE-2022-1654 — CVSS 8.8 (high): Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 allow any authenticated attacker, including a subscriber or customer-level…
CVE-2022-1657 — CVSS 8.8 (high): Vulnerable versions of the Jupiter (<= 6.10.1) and JupiterX (<= 2.0.6) Themes allow logged-in users, including subscriber-level users, to…
CVE-2023-32110 — CVSS 7.6 (high): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in artbees JupiterX allows PHP Local File…
CVE-2022-1656 — CVSS 5.4 (medium): Vulnerable versions of the JupiterX Theme (<=2.0.6) allow any logged-in user, including subscriber-level users, to access any of the…
CVE-2022-1659 — CVSS 5.4 (medium): Vulnerable versions of the JupiterX Core (<= 2.0.6) plugin register an AJAX action jupiterx_conditional_manager which can be used to call…