CVE-2025-58264

MediumCVSS 6.5

Published: 22/09/2025(UTC)Updated: 11/10/2026(UTC)Translated: 12/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

10th percentile - higher than 10% of all known CVEs

Summary

The JupiterX Core WordPress plugin contains a stored XSS vulnerability. An attacker can inject malicious script that executes in the admin's browser.

Risk Assessment

Stored XSS can lead to admin session hijacking, data theft, or content modification.

Recommendation

Update the plugin to the latest version that includes the security fix.

Other vulnerabilities in JupiterX Core

See all

CVE-2026-39490High
JupiterX Core versions up to 4.14.1 have a vulnerability in access control that allows unauthorized access to resources.
CVE-2026-39491Medium
There is a Cross Site Scripting (XSS) vulnerability for subscribers in JupiterX Core versions <= 4.14.1.

Original NVD description (English source)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in artbees JupiterX Core jupiterx-core allows Stored XSS.This issue affects JupiterX Core: from n/a through <= 4.11.0.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS