Skip to content
Threat Feed
Subscribe

Vendor

Jupiter

1 brief RSS
critical advisory

Jupiter X Core WordPress Plugin Vulnerability Leads to Remote Code Execution

The Jupiter X Core plugin for WordPress is vulnerable to remote code execution and stored cross-site scripting due to missing authorization and insufficient file type validation in versions up to 4.14.1, allowing authenticated attackers with subscriber-level access to upload malicious files.

Jupiter X Core +1 wordpress plugin rce xss file-upload
2r 1t