Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 - Authenticated Privilege Escalation
Vulnerability Description
Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 allow any authenticated attacker, including a subscriber or customer-level attacker, to gain administrative privileges via the "abb_uninstall_template" (both) and "jupiterx_core_cp_uninstall_template" (JupiterX Core Only) AJAX actions
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
特权管理不恰当
Vulnerability Title
JupiterX Core 安全漏洞
Vulnerability Description
JupiterX Core是一款Wordpress高级视图插件。 Jupiter Theme 6.10.1之前版本和JupiterX Core Plugin 2.0.7之前版本 存在安全漏洞，攻击者可利用该漏洞允许任何经过身份验证的用户（包括订阅者或客户级别的攻击者）获得管理权限并完全接管运行 Jupiter Theme 或 JupiterX Core Plugin 的任何站点。
CVSS Information
N/A
Vulnerability Type
N/A