ArtBees vulnerabilities
32 published CVEs name ArtBees among the affected products.
- Published CVEs
- 32
- Last 12 months
- 9
- Critical
- 4
- Known exploited
- 0
Critical 4High 11Medium 17Low 0Not scored 0
CVEs per yearBy the year they were published
- 20225
- 20231
- 20249
- 20258
- 20269
Newest CVEs
- CVE-2026-120555
Jupiter X Core <= 4.62.0 - Missing Authorization to Unauthenticated Limited File Download via 'file' Parameter
artbees · Jupiter X Core
Medium5.3 - CVE-2026-120737
Jupiter X Core <= 4.62.0 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'archive_query' Parameter
artbees · Jupiter X Core
Medium5.9 - CVE-2026-119219
Jupiter X Core <= 4.62.0 - Unauthenticated Stored Cross-Site Scripting via Raven Register Custom User Meta
artbees · Jupiter X Core
Medium5.4 - CVE-2026-106013
Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameter
artbees · Jupiter X Core
Critical9.8 - CVE-2026-10511
Jupiter X Core <= 4.61.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'forget_password_link' Parameter
artbees · Jupiter X Core
Medium6.4 - CVE-2026-39490
WordPress JupiterX Core plugin <= 4.14.1 - Broken Access Control vulnerability
artbees · JupiterX Core
High7.5 - CVE-2026-39491
WordPress JupiterX Core plugin <= 4.14.1 - Cross Site Scripting (XSS) vulnerability
artbees · JupiterX Core
Medium6.5 - CVE-2026-3533
JupiterX Core <= 4.14.1 - Authenticated (Subscriber+) Missing Authorization To Limited File Upload via Popup Template Import
artbees · Jupiter X Core
High8.8 - CVE-2025-50004
WordPress JupiterX Core plugin <= 4.10.1 - PHP Object Injection vulnerability
artbees · JupiterX Core
High8.8 - CVE-2025-58264
WordPress JupiterX Core Plugin <= 4.11.0 - Cross Site Scripting (XSS) Vulnerability
artbees · JupiterX Core
Medium6.5
Products with the most CVEs
Most common weaknesses
- CWE-862 Missing authorization7
- CWE-79 Cross-site scripting (XSS)6
- CWE-22 Path traversal5
- CWE-284 Improper access control3
- CWE-434 Unrestricted file upload3
- CWE-502 Deserialization of untrusted data2
- CWE-269 Improper privilege management1
- CWE-287 Improper authentication1
- CWE-288 1
- CWE-306 Missing authentication for a critical function1