CVE-2024-12316

概要

参考情報

• plugins.trac.wordpress.org/browser/jupiterx-core/trunk/includes/popups/class.php · Patch
• plugins.trac.wordpress.org/changeset/3214798/jupiterx-core/trunk/includes/popups/class.php · Patch
• wordfence.com/threat-intel/vulnerabilities/id/5db195c1-8917-4465-a5ca-21089afb0bc7 · Third Party Advisory

jupiter x core のその他の脆弱性

• CVE-2025-3888中 5.4The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File inclusion in all versions up to, and inclu…
• CVE-2025-2105高 8.1The Jupiter X Core plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.8.11 via deserializati…
• CVE-2025-0366高 8.8The Jupiter X Core plugin for WordPress is vulnerable to Local File Inclusion to Remote Code Execution in all versions up to, and including,…
• CVE-2025-0365中 6.5The Jupiter X Core plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.8.7 via the inline SVG …
• CVE-2024-12033中 4.3The Jupiter X Core plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the sync_libraries() funct…