Arbitrary File Download Vulnerability in Jupiter X Core Plugin for WordPress

CVE-2023-3813

Summary

The Jupiter X Core plugin for WordPress is susceptible to a vulnerability that allows unauthenticated attackers to download arbitrary files from the server. This weakness affects versions up to and including 2.5.0 and occurs when the premium version of the plugin is activated. The exploitation of this vulnerability could lead to the exposure of sensitive information stored on the server, making it critical for users to take timely action to update their plugins and safeguard their data.

References