An authenticated file upload vulnerability in the Artbees Jupiter X Core plugin for WordPress poses a critical risk of remote code execution and stored cross-site scripting.

This vulnerability involves missing authorization and insufficient file type validation, which allows attackers with Subscriber-level access or higher to upload malicious files. These files can lead to remote code execution on servers configured to execute .phar files or facilitate stored cross-site scripting attacks via uploaded .svg, .dfxp, or .xhtml files.

The ability for an authenticated attacker to execute arbitrary code on the underlying server represents a catastrophic security failure, potentially leading to full system compromise. With a CVSS score of 8.8, this vulnerability is classified as high severity, threatening data integrity, system availability, and user privacy. Successful exploitation could result in unauthorized access to sensitive database content and the potential for lateral movement within the network.

Immediate Action: Update the Jupiter X Core plugin to the latest available version beyond 4.14.1 to ensure the patch is applied.

Proactive Monitoring: Monitor server access logs for suspicious file uploads or access attempts to non-standard file extensions in plugin directories.

Compensating Controls: Implement a Web Application Firewall (WAF) to restrict file uploads and block suspicious file types or unauthorized access to the affected AJAX endpoints.

Public Exploit Available: Unknown.

Given the high CVSS score and the potential for remote code execution, organizations must prioritize the update of the Jupiter X Core plugin. Administrators should conduct a thorough audit of all WordPress user accounts to ensure no unauthorized subscribers have been created, as the vulnerability is accessible to any authenticated user. Failure to patch this vulnerability leaves the application infrastructure susceptible to complete takeovers.