CVE-2025-50004: WordPress JupiterX Core plugin <= 4.10.1 - PHP Object Injection vulnerability
Published Jan 22, 2026
·Updated
Deserialization of Untrusted Data vulnerability in artbees JupiterX Core jupiterx-core allows Object Injection.This issue affects JupiterX Core: from n/a through <= 4.10.1.
Affected Software
2 affected components
Artbees JupiterX Core<=4.10.1
wordpress/jupiterx-core<=4.10.1
Event History
Jan 22, 2026
CVE Published
via MITRE·04:51 PM
Data Sourced
via MITRE·04:51 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-50004?
CVE-2025-50004 is considered a critical severity vulnerability due to its potential for PHP object injection and remote code execution.
2
How do I fix CVE-2025-50004?
To fix CVE-2025-50004, update the JupiterX Core plugin to version 4.10.2 or later.
3
What is the impact of CVE-2025-50004?
The impact of CVE-2025-50004 includes potential unauthorized access and manipulation of the website, leading to possible data breaches.
4
Which versions of JupiterX Core are affected by CVE-2025-50004?
CVE-2025-50004 affects all versions of JupiterX Core from n/a to 4.10.1.
5
Is CVE-2025-50004 specific to WordPress?
Yes, CVE-2025-50004 specifically affects the JupiterX Core plugin utilized within WordPress.