Vulnerability alerts / November 7, 2026

Vulnerability in Jupiter X Core — CVE-2026-120737

MediumSeverity
CVSS 5.9

0.3%Estimated exploit probability
EPSS

70,000+ sitesInstalls

4.63.0Fixed in

What to do now

Update Jupiter X Core to 4.63.0 or later.

Affected versions

Everything up to and including 4.62.0

Affected: Jupiter X Core (plugin, jupiterx-core)

Check: The plugin on wordpress.org / Our record for Jupiter X Core

What the vulnerability is

The Jupiter X Core plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.62.0 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to enumerate and render arbitrary published post types not intended for public listing — including Flamingo CF7 submission records containing submitter names, email addresses, phone numbers, full messages, and IP addresses — and perform meta_query boolean-oracle reads against the postmeta of any published post. Exploitation requires that a Posts or Advanced Posts widget on the site has 'Is Archive Template' enabled, which is the standard Jupiter X archive-template configuration used by most Jupiter X sites; additionally, the nonce verified by the second endpoint is minted via wp_create_nonce and printed on every frontend page as ravenTools.nonce, rendering it ineffective as an authorization barrier.

This description is reproduced verbatim from the public vulnerability record.

Sources

This page is compiled automatically from public databases. Accuracy is not guaranteed; confirm against the vendor advisory before acting.

See other alerts