Skip to content
Threat Feed
Subscribe

Product

Jupiter X Core (<= 4.61.0)

1 brief RSS
critical advisory

Jupiter X Core: Authentication bypass via Twitter/X Social Login (CVE-2026-106013)

The Jupiter X Core WordPress plugin contains an authentication bypass vulnerability (CVE-2026-106013) that allows unauthenticated attackers to hijack administrative accounts by exploiting a flaw in the OAuth callback handling for X (formerly Twitter) social login.

Jupiter X Core
1r 1t 1c