Skip to content
Noroxi

artbees records

20 published records for vendor artbees.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
35%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23
  3. 24
  4. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

20 records
  • CVE-2023-38388
    40Plan

    WordPress Jupiter X Core plugin <= 3.3.5 - Unauth. Arbitrary File Upload vulnerability

    CriticalCVSS 9.8No exploitEPSS 2%

    artbees · jupiter x coreMar 26, 2024

  • CVE-2024-7772
    39Monitor

    Jupiter X Core <= 4.6.5 - Unauthenticated Arbitrary File Upload

    CriticalCVSS 9.8No exploitEPSS 2%

    artbees · jupiter x coreSep 26, 2024

  • CVE-2023-38389
    39Monitor

    WordPress Jupiter X Core plugin <= 3.3.8 - Unauthenticated Account Takeover vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    artbees · jupiter x coreJun 21, 2024

  • CVE-2024-7781
    39Monitor

    Jupiter X Core <= 4.7.5 - Limited Unauthenticated Authentication Bypass to Account Takeover

    CriticalCVSS 9.8No exploitEPSS 1%

    artbees · jupiter x coreSep 26, 2024

  • CVE-2025-0366
    35Monitor

    Jupiter X Core <= 4.8.7 - Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution)

    HighCVSS 8.8No exploitEPSS 2%

    artbees · jupiter x coreFeb 1, 2025

  • CVE-2022-1657
    35Monitor

    JupiterX Theme <= 2.0.6 and Jupiter Theme <= 6.10.1 - Authenticated Path Traversal and Local File Inclusion

    HighCVSS 8.8No exploitEPSS 2%

    artbees · jupiterJun 13, 2022

  • CVE-2022-1654
    35Monitor

    Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 - Authenticated Privilege Escalation

    HighCVSS 8.8No exploitEPSS 2%

    artbees · jupiterJun 13, 2022

  • CVE-2023-32110
    35Monitor

    WordPress JupiterX theme <= 3.0.0 - Auth. Local File Inclusion vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    artbees · jupiterxMay 17, 2024

  • CVE-2023-38385
    35Monitor

    WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    artbees · jupiter x coreDec 13, 2024

  • CVE-2023-38394
    35Monitor

    WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    artbees · jupiter x coreJun 19, 2024

  • CVE-2025-2105
    32Monitor

    Jupiter X Core <= 4.8.11 - Unauthenticated PHP Object Injection via PHAR

    HighCVSS 8.1No exploitEPSS 1%

    artbees · jupiter x coreApr 26, 2025

  • CVE-2023-3813
    30Monitor

    Jupiter X Core <= 4.6.6 - Unauthenticated Arbitrary File Download

    HighCVSS 7.5No exploitEPSS 1%

    artbees · jupiter x coreJul 20, 2023

  • CVE-2022-1659
    29Monitor

    JupiterX Core <= 2.0.6 - Information Disclosure, Modification, and Denial of Service

    HighCVSS 7.3No exploitEPSS 1%

    artbees · jupiterxJun 13, 2022

  • CVE-2025-0365
    26Monitor

    Jupiterx Core <= 4.8.7 - Authenticated (Contributor+) Arbitrary File Read

    MediumCVSS 6.5No exploitEPSS 1%

    artbees · jupiter x coreFeb 1, 2025

  • CVE-2022-1658
    21Monitor

    Jupiter Theme <= 6.10.1 - Authenticated Arbitrary Plugin Deletion

    MediumCVSS 5.4No exploitEPSS 1%

    artbees · jupiterJun 13, 2022

  • CVE-2022-1656
    21Monitor

    JupiterX Theme <= 2.0.6 and JupiterX Core <= 2.0.6 - Authenticated Arbitrary Plugin Deactivation and Settings Modification

    MediumCVSS 5.4No exploitEPSS 1%

    artbees · jupiter x coreJun 13, 2022

  • CVE-2024-12316
    21Monitor

    Jupiter X Core <= 4.8.5 - Missing Authorization to Unauthenticated Popup Template Export

    MediumCVSS 5.3No exploitEPSS 0%

    artbees · jupiter x coreJan 7, 2025

  • CVE-2025-3888
    21Monitor

    Jupiterx Core <= 4.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Inline SVG

    MediumCVSS 5.4No exploitEPSS 0%

    artbees · jupiter x coreMay 17, 2025

  • CVE-2024-4608
    21Monitor

    SellKit – Funnel builder and checkout optimizer for WooCommerce to sell more, faster <= 1.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via id

    MediumCVSS 5.4No exploitEPSS 0%

    artbees · sellkitJun 6, 2024

  • CVE-2024-12033
    17Monitor

    Jupiter X Core <= 4.8.5 - Missing Authorization to Authenticated Library Sync

    MediumCVSS 4.3No exploitEPSS 0%

    artbees · jupiter x coreJan 7, 2025