Directory Traversal Vulnerability in Jupiter X Core Plugin for WordPress
CVE-2025-0365
6.5MEDIUM
Key Information:
- Vendor
- Artbees
- Status
- Jupiter X Core
- Vendor
- CVE Published:
- 1 February 2025
Summary
The Jupiter X Core plugin for WordPress, known for its robust features, contains a vulnerability that allows authenticated users with Contributor-level access and above to exploit the inline SVG feature. This directory traversal flaw enables them to read arbitrary files on the server, potentially exposing sensitive data. Users are urged to update to the latest version to mitigate risks associated with this vulnerability.
Affected Version(s)
Jupiter X Core * <= 4.8.7
References
CVSS V3.1
Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Matthew Rollings