CVE-2023-3813

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The Jupiter X Core plugin for WordPress is vulnerable to arbitrary file downloads in versions up to, and including, 4.6.6. This makes it possible for unauthenticated attackers to download the contents of arbitrary files on the server, which can contain sensitive information. The requires the premium version of the plugin to be activated. NOTE: This vulnerability was partially patched in version 4.6.5 and fully patched in version 4.6.9.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published
Jul 21, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-381308.1Cross-site request forgery (CSRF) vulnerability in CubeCart prior to 6.5.3 allows a remote unauthenticated attacker to delete data in the syCVE-2023-381316.5Improper input validationation for some Intel Unison software may allow an authenticated user to potentially enable denial of service via neCVE-2023-381328.8LAN-W451NGR all versions provided by LOGITEC CORPORATION contains an improper access control vulnerability, which allows an unauthenticated CVE-2023-381336.5The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOCVE-2023-381356.7Improper authorization in some Intel(R) PM software may allow a privileged user to potentially enable escalation of privilege via local acceCVE-2023-381367.8The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, watchOS 9.6. An app may be able to eCVE-2023-381386.1A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility which allows an attacCVE-2023-381397.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-38144.9The Advanced File Manager WordPress plugin before 5.1.1 does not adequately authorize its usage on multisite installations, allowing site adCVE-2023-381405.5Windows Kernel Information Disclosure VulnerabilityCVE-2023-381417.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-381427.8Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-3813: High severity, CVSS 7.5 | Vulnix