ArtBees vulnerabilities
29 published CVEs name ArtBees among the affected products.
- Published CVEs
- 29
- Last 12 months
- 6
- Critical
- 4
- Known exploited
- 0
Critical 4High 11Medium 14Low 0Not scored 0
CVEs per yearBy the year they were published
- 20225
- 20231
- 20249
- 20258
- 20266
Newest CVEs
- CVE-2026-106013
Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameter
artbees · Jupiter X Core
Critical9.8 - CVE-2026-10511
Jupiter X Core <= 4.61.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'forget_password_link' Parameter
artbees · Jupiter X Core
Medium6.4 - CVE-2026-39490
WordPress JupiterX Core plugin <= 4.14.1 - Broken Access Control vulnerability
artbees · JupiterX Core
High7.5 - CVE-2026-39491
WordPress JupiterX Core plugin <= 4.14.1 - Cross Site Scripting (XSS) vulnerability
artbees · JupiterX Core
Medium6.5 - CVE-2026-3533
JupiterX Core <= 4.14.1 - Authenticated (Subscriber+) Missing Authorization To Limited File Upload via Popup Template Import
artbees · Jupiter X Core
High8.8 - CVE-2025-50004
WordPress JupiterX Core plugin <= 4.10.1 - PHP Object Injection vulnerability
artbees · JupiterX Core
High8.8 - CVE-2025-58264
WordPress JupiterX Core Plugin <= 4.11.0 - Cross Site Scripting (XSS) Vulnerability
artbees · JupiterX Core
Medium6.5 - CVE-2025-3888
Jupiterx Core <= 4.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Inline SVG
artbees · Jupiter X Core
Medium6.4 - CVE-2025-47475
WordPress JupiterX Core plugin <= 4.8.11 - Cross Site Scripting (XSS) Vulnerability
artbees · JupiterX Core
Medium6.5 - CVE-2025-2105
Jupiter X Core <= 4.8.11 - Unauthenticated PHP Object Injection via PHAR
artbees · Jupiter X Core
High8.1
Products with the most CVEs
Most common weaknesses
- CWE-22 Path traversal5
- CWE-79 Cross-site scripting (XSS)5
- CWE-862 Missing authorization5
- CWE-284 Improper access control3
- CWE-434 Unrestricted file upload3
- CWE-502 Deserialization of untrusted data2
- CWE-269 Improper privilege management1
- CWE-287 Improper authentication1
- CWE-288 1
- CWE-306 Missing authentication for a critical function1