Vulnerabilities > Artbees > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-09-26 CVE-2024-7772 Unrestricted Upload of File with Dangerous Type vulnerability in Artbees Jupiter X Core
The Jupiter X Core plugin for WordPress is vulnerable to arbitrary file uploads due to a mishandled file type validation in the 'validate' function in all versions up to, and including, 4.6.5.
network
low complexity
artbees CWE-434
critical
9.8
2024-09-26 CVE-2024-7781 Missing Authentication for Critical Function vulnerability in Artbees Jupiter X Core
The Jupiter X Core plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 4.7.5.
network
low complexity
artbees CWE-306
critical
9.8
2024-06-21 CVE-2023-38389 Unspecified vulnerability in Artbees Jupiter X Core
Incorrect Authorization vulnerability in Artbees JupiterX Core allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JupiterX Core: from n/a through 3.3.8.
network
low complexity
artbees
critical
9.8