Skip to content
PluginCanary

Jupiter X Core

by artbees · 70,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 22 Oct 2026, 28 releases in 24 months, no unpatched vulnerabilities.

83/ 100 Canary Score
Sub-scores for Jupiter X Core
Ownership100
Maintenance100
Security60
SupportNo data
Reputation70

How the score works

Quick answers

Is Jupiter X Core still maintained?
Yes. Last release 22 Oct 2026, 28 releases in the last 24 months. 22 Oct 2026 · wordpress.org
Who owns Jupiter X Core, and has it changed hands?
No change recorded. Main committer artbees since Aug 2019. 4 Nov 2026 · SVN log
Was Jupiter X Core removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Jupiter X Core safe?
25 known vulnerabilities, all fixed (latest in 4.62.0). Not on the exploited list. 27 Oct 2026 · Wordfence Intelligence
Is the latest Jupiter X Core update safe to install?
No ownership change before 4.62.0. No one-star spike after it. 22 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master28 May 2019 to 28 May 2019, 1 commits
artbees27 Aug 2019 to 22 Oct 2026, 70 commits
artbeesnima11 Mar 2026 to 19 Mar 2026, 10 commits

3 committers recorded. No ownership change since 2019.

Maintenance

Last release
13 days ago
Releases, 24 months
28
Tested up to
7.1 current
Requires PHP
7.0 supported 8.2+
Releases per quarter
Releases per quarter for Jupiter X Core
Q1 20240
Q2 20240
Q3 20245
Q4 20242
Q1 20255
Q2 20254
Q3 202512
Q4 20250
Q1 20261
Q2 20262
Q3 20261
Q4 20261

Last release 22 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 2.0 (1 review). Lifetime: 1.9.

Rating distribution
5 star1
4 star0
3 star1
2 star2
1 star5
Latest low reviews

Security record

14 vulnerabilities in 24 months (25 on record), all patched (latest fixed in 4.62.0).

Show 25 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
27 Oct 2026Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameter9.8<= 4.61.04.62.0Patched before disclosure
26 Oct 2026Jupiter X Core <= 4.61.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'forget_password_link' Parameter6.4<= 4.61.04.62.0Patched before disclosure
20 Apr 2026Jupiter X Core <= 4.14.1 - Missing Authorization5.3<= 4.14.14.14.2Patched before disclosure
13 Apr 2026Jupiter X Core <= 4.14.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4<= 4.14.14.14.2Patched before disclosure
23 Mar 2026JupiterX Core <= 4.14.1 - Authenticated (Subscriber+) Missing Authorization To Limited File Upload via Popup Template Import8.8<= 4.14.14.14.2Patched before disclosure
12 Jan 2026JupiterX Core <= 4.10.1 - Authenticated (Contributor+) PHP Object Injection7.5<= 4.10.14.11.0Patched before disclosure
22 Sep 2025JupiterX Core <= 4.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 4.11.04.11.1n/a
16 May 2025Jupiterx Core <= 4.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Inline SVG6.4<= 4.8.124.9.1Patched before disclosure
7 May 2025JupiterX Core <= 4.8.11 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 4.8.114.8.12Patched before disclosure
25 Apr 2025Jupiter X Core <= 4.8.11 - Unauthenticated PHP Object Injection via PHAR8.1<= 4.8.114.8.12Patched before disclosure
31 Jan 2025Jupiterx Core <= 4.8.7 - Authenticated (Contributor+) Arbitrary File Read6.5<= 4.8.74.8.8Patched before disclosure
31 Jan 2025Jupiter X Core <= 4.8.7 - Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution)8.8<= 4.8.74.8.8Patched before disclosure
6 Jan 2025Jupiter X Core <= 4.8.5 - Missing Authorization to Authenticated Library Sync4.3<= 4.8.54.8.6Patched before disclosure
6 Jan 2025Jupiter X Core <= 4.8.5 - Missing Authorization to Unauthenticated Popup Template Export5.3<= 4.8.54.8.6Patched before disclosure
25 Sep 2024Jupiter X Core <= 4.7.5 - Limited Unauthenticated Authentication Bypass to Account Takeover8.1<= 4.7.54.7.848
23 Aug 2024Jupiter X Core <= 4.6.5 - Unauthenticated Arbitrary File Upload9.8<= 4.6.54.6.65
22 Aug 2023JupiterX Core <= 3.3.5 - Unauthenticated Arbitrary File Upload9.8<= 3.3.53.3.8n/a
22 Aug 2023JupiterX Core <= 3.3.8 - Unauthenticated Privilege Escalation9.8<= 3.3.83.4.3n/a
13 Aug 2023JupiterX Core 3.0.0 - 3.3.0 - Missing Authorization4.33.0.0 to 3.3.03.3.5n/a
13 Aug 2023JupiterX Core 3.0.0 - 3.3.0 - Missing Authorization8.33.0.0 to 3.3.03.3.5n/a
20 Jul 2023Jupiter X Core <= 4.6.6 - Unauthenticated Arbitrary File Download7.5<= 4.6.64.6.9420
8 Aug 2022Jupiter X Core <= 2.0.9 - Missing Authorization Checks7.6<= 2.0.92.1.0Patched before disclosure
18 May 2022JupiterX Core <= 2.0.6 - Information Disclosure, Modification, and Denial of Service6.3<= 2.0.62.0.7n/a
18 May 2022Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 - Authenticated Privilege Escalation9.9<= 2.0.72.0.8n/a
18 May 2022JupiterX Theme <= 2.0.6 and JupiterX Core <= 2.0.6 - Authenticated Arbitrary Plugin Deactivation and Settings Modification6.5<= 2.0.62.0.7n/a

Changelog mentions of security fixes: 4.62.0 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

70,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Jupiter X Core
4 May 20261,596
11 May 20262,740
18 May 20265,689
25 May 20262,163
1 Jun 202618,438
8 Jun 20263,497
15 Jun 20262,893
22 Jun 20262,104
29 Jun 20262,178
6 Jul 20265,015
13 Jul 20261,834
20 Jul 20261,590
27 Jul 20261,645
3 Aug 20261,572
10 Aug 20261,353
17 Aug 202620,970
24 Aug 20263,578
31 Aug 20262,536
7 Sep 20261,991
14 Sep 20261,925
21 Sep 20262,007
28 Sep 20261,792
5 Oct 20261,858
12 Oct 20261,631
19 Oct 202621,402
26 Oct 202611,603
2 Nov 2026563

Weekly downloads over the last 4 weeks are 88% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Starter Sites & Templates by NeveScore 100 · 100,000+Sydney ToolboxScore 100 · 50,000+Import / Export Customizer SettingsScore 100 · 50,000+Bosa Starter SitesScore 100 · 30,000+Clever FoxScore 100 · 30,000+

Facts

Version4.62.0
Authorartbees
Added27 Aug 2019
Last updated22 Oct 2026
Active installs70,000+
Requires WordPress5.6
Tested up to7.1.4
Requires PHP7.0
CategoryDesign & Themes > Page Builders & Visual Editors
Tagsjupiter, jupiterx

Other plugins by this author: SellKit - Funnel builder and checkout optimizer for WooCommerce to sell more, faster, Artbees Wishlist for WooCommerce, Artbees Product Tabs for WooCommerce, Artbees Quick View for WooCommerce, Artbees Request a Quote for WooCommerce

Questions

Is Jupiter X Core still maintained?

Yes. Last release 22 Oct 2026, 28 releases in the last 24 months.

Who owns Jupiter X Core, and has it changed hands?

No change recorded. Main committer artbees since Aug 2019.

Was Jupiter X Core removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Jupiter X Core safe?

25 known vulnerabilities, all fixed (latest in 4.62.0). Not on the exploited list.

Is the latest Jupiter X Core update safe to install?

No ownership change before 4.62.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue