Known vulnerabilities in Jupiter X Core

Core functionalities for Jupiter X theme.

23Reported vulnerabilities

9.9Highest CVSS score

4.60.0Latest version

70,000+Active installs

What to do now

Update Jupiter X Core to 4.14.2 or later. 23 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 17, 2026 / Tested up to WordPress: 6.9.7 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2023-3813	High 7.5	1.2%	2.5.0 and earlier	`4.6.9`	July 21, 2023
CVE-2022-1654	Critical 9.9	1.6%	2.0.7 and earlier	`2.0.8`	May 18, 2022
CVE-2024-7772	Critical 9.8	1.5%	Before 4.6.6	`4.6.6`	September 26, 2024
CVE-2023-38388	Critical 9.8	1.7%	3.3.5 and earlier	`3.3.8`	August 22, 2023
CVE-2023-38389	Critical 9.8	1.4%	3.3.8 and earlier	`3.4.3`	August 22, 2023
CVE-2024-7781	Critical 9.8	1.0%	Before 4.7.8	`4.7.8`	September 26, 2024
CVE-2025-0366	High 8.8	1.6%	Before 4.8.8	`4.8.8`	February 1, 2025
CVE-2026-3533	High 8.8	0.7%	0 to 4.14.1 (inclusive)	`4.14.2`	March 24, 2026
CVE-2023-38385	High 8.3	0.6%	3.0.0 to 3.3.0 (inclusive)	`3.3.5`	August 13, 2023
CVE-2025-2105	High 8.1	0.7%	Before 4.8.12	`4.8.12`	April 26, 2025
CVE-2025-50004	High 7.5	0.6%	4.10.1 and earlier	`4.11.0`	January 12, 2026
WF-52daa230-1600-4ace-9adf-3f4e9be51e9f	High 7.6	—	2.0.9 and earlier	`2.1.0`	August 8, 2022
CVE-2025-0365	Medium 6.5	0.7%	Before 4.8.8	`4.8.8`	February 1, 2025
CVE-2022-1656	Medium 6.5	0.5%	2.0.6 and earlier	`2.0.7`	May 18, 2022
CVE-2025-47475	Medium 6.4	0.3%	4.8.11 and earlier	`4.8.12`	May 7, 2025
CVE-2022-1659	Medium 6.3	0.9%	2.0.6 and earlier	`2.0.7`	May 18, 2022
CVE-2026-39491	Medium 6.4	0.2%	4.14.1 and earlier	`4.14.2`	April 13, 2026
CVE-2025-58264	Medium 6.4	0.2%	4.11.0 and earlier	`4.11.1`	September 22, 2025
CVE-2025-3888	Medium 5.4	0.3%	4.8.12 and earlier	`4.9.1`	May 17, 2025
CVE-2026-39490	Medium 5.3	0.3%	4.14.1 and earlier	`4.14.2`	April 20, 2026
CVE-2024-12316	Medium 5.3	0.4%	Before 4.8.6	`4.8.6`	January 7, 2025
CVE-2024-12033	Medium 4.3	0.3%	Before 4.8.6	`4.8.6`	January 7, 2025
CVE-2023-38394	Medium 4.3	0.4%	3.0.0 to 3.3.0 (inclusive)	`3.3.5`	August 13, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.