Jupiter X Core

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

51 searches this plugin appeared in over the last 90 days, 11 listed. 40 left out as unrelated or noise (years, numbers, stray words).

Directory rank

wp.org popularity rank over time · lower is better

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 4 months ago; the previous band took 13 months to cross, which places it about 70% of the way through.

1. ★★★★★ enri90

   2.1y ago

   it’s full of bugs the developers are very slow in fixing the problems meanwhile the online site is full of problems This topic was modified 1 year, 9 months ago by enri90.

   Read on wp.org ↗
2. ★★★★★ gastongc

   4.4y ago

   Fatal error on my website due to auto-updates. Found out a week later.

   Read on wp.org ↗
3. ★★★★★ Karim

   4.4y ago

   2.0.9 broke my site Missing file /wp-content/plugins/jupiterx-core/includes/customizer/settings/layout/popup.php Even the folder /wp-content/plugins/jupiterx-core/includes/customizer/settings/layout/ is not there Can’t find a link to 2.0.8

   Read on wp.org ↗
4. ★★★★★ Nathan Saulter

   4.6y ago

   I was enjoying Jupiter X Core a lot when my organization first purchased it. However, after some recent updates, it has ruined my website. First, any time I was logged into my WordPress dashboard and I tried to click on the Jupiter X dashboard, I would immediately get an error message that a critical error occurred on my website and it had essentially “crashed”. It appeared to only crash that particular page on the WordPress admin side, but the public side of my website still functioned, so I just ignored it and hoped for an update. Well, an update came, unfortunately, it made the issue worse… I updated Jupiter X Core to the latest version and it broke my site. Critical error again, except this time my site was completely down. I did all the usual troubleshooting and the only thing that brought my site back was rolling back the plugin. I recommend WP Rollback plugin by GiveWP.com for this. It worked like a charm. I’ve looked on some of the Artbees forums (Artbees created Jupiter X) and they seem to mention removing Raven, however, they DON’T give any kind of step-by-step instructions. It seems like you have to pay for support and then they will do it for you once you give them your login details. That is just absolutely ridiculous and one of the reasons I’m giving this plugin 1 star. I hope they fix this issue, but what really annoys me is that they didn’t contact me or its users to tell them about this huge error and they did not give detailed instructions on how to fix it. I would not recommend ever using any Jupiter X or Artbees products for this reason. Good customer service is the OG of UX research, and these developers seem to not care about either…

   Read on wp.org ↗
5. ★★★★★ msaracen365

   4.6y ago

   I can’t change the customize settings after the last update. This topic was modified 4 years, 4 months ago by msaracen365.

   Read on wp.org ↗
6. ★★★★★ yrok

   4.6y ago

   I’m using Jupiter X as the theme for my website and I’m unable to open the ‘personalise’ panel when this plugin is active. It works when disabled, but the theme requires this plugin to make changes to the website.

   Read on wp.org ↗
7. ★★★★★ dlsn

   4.7y ago

   Customizer doesn’t work any more after updating this plugin. I’ve just installed the pervious version and now it works. So the problem is caused by the new update (or a compatibility with the theme Jupiter X Lite) I would appreciate the correction of the bug in the update and a notification from you.

   Read on wp.org ↗
8. ★★★★★ okezumi

   4.7y ago

   [My Template] in elementor do not work after enabling this plugin.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 4.14.2 Fixed security vulnerabilities. 4.14.2
2. — Version 4.14.1 Fixed incompatibilities with new ready-made templates. Fixed Swiper autoloop bug in Testimonial Carousel widget. 4.14.1
3. — Version 4.14.0 Added “Use Site’s Logo” toggle option in Site Logo widget to improve UX and visibility, replacing the legacy dynamic tag. Added “Close Menu On Scroll” option in Advanced Menu widget. Added “ID” field rendering to form fr 4.14.0
4. — Version 4.13.0 Added Related to Current Post option in Advanced Posts widget. Added Scroll to Beginning option in Advanced Tab widget. Added promotion banner system to Control Panel. Fixed Navigation Menu vertical mode alignment issue. 4.13.0
5. — Version 4.12.0 Added AND logic between popup triggers. Fixed issues related to popup triggers behavior. Fixed column count in Counter widget. Fixed Elementor cache and shortcode context for JupiterX Global Widgets. Added option to excl 4.12.0
6. — Version 4.11.1 Fixed a security issue. Added Play Icon section to the Media Carousel widget style tab. Added empty state handling for advanced posts widget. 4.11.1

All 25 disclosed vulnerabilities are patched in the current version (4.62.0). Sites still on an older version should update.

1. Patched Critical · 9.8 Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameter ↗
   2026-10-27 CVE-2026-106013 Improper Authentication Affects <= 4.61.0 Patched in 4.62.0
2. Patched Medium · 6.4 Jupiter X Core <= 4.61.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'forget_password_link' Parameter ↗
   2026-10-26 CVE-2026-10511 Improper Neutralization of Script-Related HTML Tags in a Web Page Affects <= 4.61.0 Patched in 4.62.0
3. Patched Medium · 5.3 Jupiter X Core <= 4.14.1 - Missing Authorization ↗
   2026-04-20 CVE-2026-39490 Missing Authorization Affects <= 4.14.1 Patched in 4.14.2
4. Patched Medium · 6.4 Jupiter X Core <= 4.14.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting ↗
   2026-04-13 CVE-2026-39491 Improper Neutralization of Input During Web Page Generation Affects <= 4.14.1 Patched in 4.14.2
5. Patched High · 8.8 JupiterX Core <= 4.14.1 - Authenticated (Subscriber+) Missing Authorization To Limited File Upload via Popup Template Import ↗
   2026-03-23 CVE-2026-3533 Unrestricted Upload of File with Dangerous Type Affects <= 4.14.1 Patched in 4.14.2
6. Patched High · 7.5 JupiterX Core <= 4.10.1 - Authenticated (Contributor+) PHP Object Injection ↗
   2026-01-12 CVE-2025-50004 Deserialization of Untrusted Data Affects <= 4.10.1 Patched in 4.11.0
7. Patched Medium · 6.4 JupiterX Core <= 4.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-09-22 CVE-2025-58264 Improper Neutralization of Input During Web Page Generation Affects <= 4.11.0 Patched in 4.11.1
8. Patched Medium · 6.4 Jupiterx Core <= 4.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Inline SVG ↗
   2025-05-16 CVE-2025-3888 Improper Neutralization of Input During Web Page Generation Affects <= 4.8.12 Patched in 4.9.1
9. Patched Medium · 6.4 JupiterX Core <= 4.8.11 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-05-07 CVE-2025-47475 Improper Neutralization of Input During Web Page Generation Affects <= 4.8.11 Patched in 4.8.12
10. Patched High · 8.1 Jupiter X Core <= 4.8.11 - Unauthenticated PHP Object Injection via PHAR ↗
    2025-04-25 CVE-2025-2105 Deserialization of Untrusted Data Affects <= 4.8.11 Patched in 4.8.12
11. Patched High · 8.8 Jupiter X Core <= 4.8.7 - Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution) ↗
    2025-01-31 CVE-2025-0366 Improper Control of Filename for Include/Require Statement in PHP Program Affects <= 4.8.7 Patched in 4.8.8
12. Patched Medium · 6.5 Jupiterx Core <= 4.8.7 - Authenticated (Contributor+) Arbitrary File Read ↗
    2025-01-31 CVE-2025-0365 Improper Limitation of a Pathname to a Restricted Directory Affects <= 4.8.7 Patched in 4.8.8
13. Patched Medium · 5.3 Jupiter X Core <= 4.8.5 - Missing Authorization to Unauthenticated Popup Template Export ↗
    2025-01-06 CVE-2024-12316 Missing Authorization Affects <= 4.8.5 Patched in 4.8.6
14. Patched Medium · 4.3 Jupiter X Core <= 4.8.5 - Missing Authorization to Authenticated Library Sync ↗
    2025-01-06 CVE-2024-12033 Missing Authorization Affects <= 4.8.5 Patched in 4.8.6
15. Patched High · 8.1 Jupiter X Core <= 4.7.5 - Limited Unauthenticated Authentication Bypass to Account Takeover ↗
    2024-09-25 CVE-2024-7781 Authentication Bypass Using an Alternate Path or Channel Affects <= 4.7.5 Patched in 4.7.8
16. Patched Critical · 9.8 Jupiter X Core <= 4.6.5 - Unauthenticated Arbitrary File Upload ↗
    2024-08-23 CVE-2024-7772 Unrestricted Upload of File with Dangerous Type Affects <= 4.6.5 Patched in 4.6.6
17. Patched Critical · 9.8 JupiterX Core <= 3.3.5 - Unauthenticated Arbitrary File Upload ↗
    2023-08-22 CVE-2023-38388 Unrestricted Upload of File with Dangerous Type Affects <= 3.3.5 Patched in 3.3.8
18. Patched Critical · 9.8 JupiterX Core <= 3.3.8 - Unauthenticated Privilege Escalation ↗
    2023-08-22 CVE-2023-38389 Authentication Bypass Using an Alternate Path or Channel Affects <= 3.3.8 Patched in 3.4.3
19. Patched High · 8.3 JupiterX Core 3.0.0 - 3.3.0 - Missing Authorization ↗
    2023-08-13 CVE-2023-38385 Missing Authorization Affects 3.0.0 - 3.3.0 Patched in 3.3.5
20. Patched Medium · 4.3 JupiterX Core 3.0.0 - 3.3.0 - Missing Authorization ↗
    2023-08-13 CVE-2023-38394 Missing Authorization Affects 3.0.0 - 3.3.0 Patched in 3.3.5
21. Patched High · 7.5 Jupiter X Core <= 4.6.6 - Unauthenticated Arbitrary File Download ↗
    2023-07-20 CVE-2023-3813 Improper Limitation of a Pathname to a Restricted Directory Affects <= 4.6.6 Patched in 4.6.9
22. Patched High · 7.6 Jupiter X Core <= 2.0.9 - Missing Authorization Checks ↗
    2022-08-08 Missing Authorization Affects <= 2.0.9 Patched in 2.1.0
23. Patched Medium · 6.5 JupiterX Theme <= 2.0.6 and JupiterX Core <= 2.0.6 - Authenticated Arbitrary Plugin Deactivation and Settings Modification ↗
    2022-05-18 CVE-2022-1656 Improper Access Control Affects <= 2.0.6 Patched in 2.0.7
24. Patched Critical · 9.9 Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 - Authenticated Privilege Escalation ↗
    2022-05-18 CVE-2022-1654 Improper Privilege Management Affects <= 2.0.7 Patched in 2.0.8
25. Patched Medium · 6.3 JupiterX Core <= 2.0.6 - Information Disclosure, Modification, and Denial of Service ↗
    2022-05-18 CVE-2022-1659 Improper Access Control Affects <= 2.0.6 Patched in 2.0.7

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 6 languages, 0 at 90% or more

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-07-10 80K+ → 70K+ down after 376 days in tier
2. 2025-06-29 90K+ → 80K+ down after 1246 days in tier
3. 2022-01-30 60K+ → 90K+ up

Embed this report card

Drop a live Pulse card for Jupiter X Core into a readme, a review or a deck. It updates itself.

Jupiter X Core: 70K+ active installs, 1.9★ (9 reviews). Plugin Pulse (WP Mayor), as of 2026-11-01. https://plugins.wpmayor.com/plugin/jupiterx-core