Jupiter vulnerabilities

2 known vulnerabilities in Jupiter from ArtBees. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Jupiter: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-1657Jun 13, 2022ArtBeesEPSS 1.66%

  Vulnerable versions of the Jupiter (<= 6.10.1) and JupiterX (<= 2.0.6) Themes allow logged-in users, including subscriber-level users, to perform Path Traversal and Local File inclusion. In the JupiterX theme, the jupiterx_cp_load_pane_action AJAX action prese

• 8.8 High severity

  Jupiter X Core: Improper Privilege Management

  CVE-2022-1654Jun 13, 2022ArtBeesEPSS 1.58%

  Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 allow any authenticated attacker, including a subscriber or customer-level attacker, to gain administrative privileges via the "abb_uninstall_template" (both) and "jupiterx_core_cp_uninstall_template" (