WordPress Plugin Vulnerabilities | Page 21 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2022-05-18

Title

JupiterX < 2.0.7 & JupiterX Core < 2.0.7 - Subscriber+ Arbitrary Plugin Deactivation and Settings Update

Slug

Published

2022-05-18

Title

JupiterX Core < 2.0.7 - Information Disclosure, Modification, and Denial of Service

Slug

Published

2023-07-20

Title

Jupiter X Core < 4.6.9 - Unauthenticated Arbitrary File Download

Slug

Published

2023-08-22

Title

Jupiter X Core Premium < 3.4.3 - Unauthenticated Privilege Escalation

Slug

Published

2023-08-22

Title

Jupiter X Core Premium < 3.3.8 - Unauthenticated Arbitrary File Upload

Slug

Published

2024-08-23

Title

Jupiter X Core < 4.6.6 - Unauthenticated Arbitrary File Upload

Slug

Published

2024-09-25

Title

Jupiter X Core < 4.7.8 - Limited Unauthenticated Authentication Bypass to Account Takeover

Slug

Published

2025-01-06

Title

Jupiter X Core < 4.8.6 - Missing Authorization to Unauthenticated Popup Template Export

Slug

Published

2025-01-06

Title

Jupiter X Core < 4.8.6 - Missing Authorization to Authenticated Library Sync

Slug

Published

2025-01-31

Title

Jupiter X Core < 4.8.8 - Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution)

Slug

Published

2025-01-31

Title

Jupiterx Core < 4.8.8 - Authenticated (Contributor+) Arbitrary File Read

Slug

Published

2025-04-25

Title

Jupiter X Core < 4.8.12 - Unauthenticated PHP Object Injection via PHAR

Slug

Published

2025-05-07

Title

JupiterX Core < 4.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2025-05-16

Title

Jupiterx Core < 4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Inline SVG

Slug

Published

2025-09-22

Title

JupiterX Core < 4.11.1 - Contributor+ Stored XSS

Slug

Published

2026-01-12

Title

JupiterX Core < 4.11.0 - Authenticated (Contributor+) PHP Object Injection

Slug

Published

2026-03-23

Title

JupiterX Core < 4.14.2 - Authenticated (Subscriber+) Missing Authorization To Limited File Upload via Popup Template Import

Slug

Published

2026-04-13

Title

Jupiter X Core < 4.14.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Slug

Published

2026-04-20

Title

Jupiter X Core < 4.14.2 - Missing Authorization

Slug

just-custom-fields

Published

2023-10-19

Title

Just Custom Fields <= 3.3.2 - Missing Authorization on AJAX Actions

Slug

just-custom-fields

Published

2023-10-19

Title

Just Custom Fields <= 3.3.2 - Cross-Site Request Forgery on AJAX Actions

Slug

just-custom-fields

Published

2024-07-08

Title

Just Custom Fields <= 3.3.2 - Missing Authorization via AJAX actions

Slug

just-custom-fields

Published

2024-07-08

Title

Just Custom Fields <= 3.3.2 - Cross-Site Request Forgery via AJAX actions

Slug

Published

2025-11-24

Title

Just Highlight <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Highlight Color' Setting

Slug

just-post-preview

Published

2025-04-04

Title

Just Post Preview Widget <= 1.1.1 - Authenticated (Contributor+) Local File Inclusion