Jupiter X Core

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank

wp.org popularity rank over time · lower is better

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

1. ★★★★★ enri90

   1.9y ago

   it’s full of bugs the developers are very slow in fixing the problems meanwhile the online site is full of problems This topic was modified 1 year, 9 months ago by enri90.

   Read on wp.org ↗
2. ★★★★★ gastongc

   4.2y ago

   Fatal error on my website due to auto-updates. Found out a week later.

   Read on wp.org ↗
3. ★★★★★ Karim

   4.2y ago

   2.0.9 broke my site Missing file /wp-content/plugins/jupiterx-core/includes/customizer/settings/layout/popup.php Even the folder /wp-content/plugins/jupiterx-core/includes/customizer/settings/layout/ is not there Can’t find a link to 2.0.8

   Read on wp.org ↗
4. ★★★★★ Nathan Saulter

   4.4y ago

   I was enjoying Jupiter X Core a lot when my organization first purchased it. However, after some recent updates, it has ruined my website. First, any time I was logged into my WordPress dashboard and I tried to click on the Jupiter X dashboard, I would immediately get an error message that a critical error occurred on my website and it had essentially “crashed”. It appeared to only crash that particular page on the WordPress admin side, but the public side of my website still functioned, so I just ignored it and hoped for an update. Well, an update came, unfortunately, it made the issue worse… I updated Jupiter X Core to the latest version and it broke my site. Critical error again, except this time my site was completely down. I did all the usual troubleshooting and the only thing that brought my site back was rolling back the plugin. I recommend WP Rollback plugin by GiveWP.com for this. It worked like a charm. I’ve looked on some of the Artbees forums (Artbees created Jupiter X) and they seem to mention removing Raven, however, they DON’T give any kind of step-by-step instructions. It seems like you have to pay for support and then they will do it for you once you give them your login details. That is just absolutely ridiculous and one of the reasons I’m giving this plugin 1 star. I hope they fix this issue, but what really annoys me is that they didn’t contact me or its users to tell them about this huge error and they did not give detailed instructions on how to fix it. I would not recommend ever using any Jupiter X or Artbees products for this reason. Good customer service is the OG of UX research, and these developers seem to not care about either…

   Read on wp.org ↗
5. ★★★★★ msaracen365

   4.5y ago

   I can’t change the customize settings after the last update. This topic was modified 4 years, 4 months ago by msaracen365.

   Read on wp.org ↗
6. ★★★★★ yrok

   4.5y ago

   I’m using Jupiter X as the theme for my website and I’m unable to open the ‘personalise’ panel when this plugin is active. It works when disabled, but the theme requires this plugin to make changes to the website.

   Read on wp.org ↗
7. ★★★★★ dlsn

   4.5y ago

   Customizer doesn’t work any more after updating this plugin. I’ve just installed the pervious version and now it works. So the problem is caused by the new update (or a compatibility with the theme Jupiter X Lite) I would appreciate the correction of the bug in the update and a notification from you.

   Read on wp.org ↗
8. ★★★★★ okezumi

   4.5y ago

   [My Template] in elementor do not work after enabling this plugin.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 4.14.2 Fixed security vulnerabilities. 4.14.2
2. — Version 4.14.1 Fixed incompatibilities with new ready-made templates. Fixed Swiper autoloop bug in Testimonial Carousel widget. 4.14.1
3. — Version 4.14.0 Added “Use Site’s Logo” toggle option in Site Logo widget to improve UX and visibility, replacing the legacy dynamic tag. Added “Close Menu On Scroll” option in Advanced Menu widget. Added “ID” field rendering to form fr 4.14.0
4. — Version 4.13.0 Added Related to Current Post option in Advanced Posts widget. Added Scroll to Beginning option in Advanced Tab widget. Added promotion banner system to Control Panel. Fixed Navigation Menu vertical mode alignment issue. 4.13.0
5. — Version 4.12.0 Added AND logic between popup triggers. Fixed issues related to popup triggers behavior. Fixed column count in Counter widget. Fixed Elementor cache and shortcode context for JupiterX Global Widgets. Added option to excl 4.12.0
6. — Version 4.11.1 Fixed a security issue. Added Play Icon section to the Media Carousel widget style tab. Added empty state handling for advanced posts widget. 4.11.1

23 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 5.3 Jupiter X Core <= 4.14.1 - Missing Authorization ↗
   2026-04-20 CVE-2026-39490 Missing Authorization Affects <= 4.14.1 Patched in 4.14.2
2. Medium · 6.4 Jupiter X Core <= 4.14.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting ↗
   2026-04-13 CVE-2026-39491 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.14.1 Patched in 4.14.2
3. High · 8.8 JupiterX Core <= 4.14.1 - Authenticated (Subscriber+) Missing Authorization To Limited File Upload via Popup Template Import ↗
   2026-03-23 CVE-2026-3533 Unrestricted Upload of File with Dangerous Type Affects <= 4.14.1 Patched in 4.14.2
4. High · 7.5 JupiterX Core <= 4.10.1 - Authenticated (Contributor+) PHP Object Injection ↗
   2026-01-12 CVE-2025-50004 Deserialization of Untrusted Data Affects <= 4.10.1 Patched in 4.11.0
5. Medium · 6.4 JupiterX Core <= 4.11.0 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-09-22 CVE-2025-58264 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.11.0 Patched in 4.11.1
6. Medium · 6.4 Jupiterx Core <= 4.8.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Inline SVG ↗
   2025-05-16 CVE-2025-3888 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.8.12 Patched in 4.9.1
7. Medium · 6.4 JupiterX Core <= 4.8.11 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-05-07 CVE-2025-47475 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.8.11 Patched in 4.8.12
8. High · 8.1 Jupiter X Core <= 4.8.11 - Unauthenticated PHP Object Injection via PHAR ↗
   2025-04-25 CVE-2025-2105 Deserialization of Untrusted Data Affects <= 4.8.11 Patched in 4.8.12
9. High · 8.8 Jupiter X Core <= 4.8.7 - Authenticated (Contributor+) SVG Upload to Local File Inclusion (Remote Code Execution) ↗
   2025-01-31 CVE-2025-0366 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') Affects <= 4.8.7 Patched in 4.8.8
10. Medium · 6.5 Jupiterx Core <= 4.8.7 - Authenticated (Contributor+) Arbitrary File Read ↗
    2025-01-31 CVE-2025-0365 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 4.8.7 Patched in 4.8.8
11. Medium · 5.3 Jupiter X Core <= 4.8.5 - Missing Authorization to Unauthenticated Popup Template Export ↗
    2025-01-06 CVE-2024-12316 Missing Authorization Affects <= 4.8.5 Patched in 4.8.6
12. Medium · 4.3 Jupiter X Core <= 4.8.5 - Missing Authorization to Authenticated Library Sync ↗
    2025-01-06 CVE-2024-12033 Missing Authorization Affects <= 4.8.5 Patched in 4.8.6
13. High · 8.1 Jupiter X Core <= 4.7.5 - Limited Unauthenticated Authentication Bypass to Account Takeover ↗
    2024-09-25 CVE-2024-7781 Authentication Bypass Using an Alternate Path or Channel Affects <= 4.7.5 Patched in 4.7.8
14. Critical · 9.8 Jupiter X Core <= 4.6.5 - Unauthenticated Arbitrary File Upload ↗
    2024-08-23 CVE-2024-7772 Unrestricted Upload of File with Dangerous Type Affects <= 4.6.5 Patched in 4.6.6
15. Critical · 9.8 JupiterX Core <= 3.3.5 - Unauthenticated Arbitrary File Upload ↗
    2023-08-22 CVE-2023-38388 Unrestricted Upload of File with Dangerous Type Affects <= 3.3.5 Patched in 3.3.8
16. Critical · 9.8 JupiterX Core <= 3.3.8 - Unauthenticated Privilege Escalation ↗
    2023-08-22 CVE-2023-38389 Authentication Bypass Using an Alternate Path or Channel Affects <= 3.3.8 Patched in 3.4.3
17. High · 8.3 JupiterX Core 3.0.0 - 3.3.0 - Missing Authorization ↗
    2023-08-13 CVE-2023-38385 Missing Authorization Affects 3.0.0 - 3.3.0 Patched in 3.3.5
18. Medium · 4.3 JupiterX Core 3.0.0 - 3.3.0 - Missing Authorization ↗
    2023-08-13 CVE-2023-38394 Missing Authorization Affects 3.0.0 - 3.3.0 Patched in 3.3.5
19. High · 7.5 Jupiter X Core <= 4.6.6 - Unauthenticated Arbitrary File Download ↗
    2023-07-20 CVE-2023-3813 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 4.6.6 Patched in 4.6.9
20. High · 7.6 Jupiter X Core <= 2.0.9 - Missing Authorization Checks ↗
    2022-08-08 Missing Authorization Affects <= 2.0.9 Patched in 2.1.0
21. Medium · 6.5 JupiterX Theme <= 2.0.6 and JupiterX Core <= 2.0.6 - Authenticated Arbitrary Plugin Deactivation and Settings Modification ↗
    2022-05-18 CVE-2022-1656 Improper Access Control Affects <= 2.0.6 Patched in 2.0.7
22. Critical · 9.9 Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 - Authenticated Privilege Escalation ↗
    2022-05-18 CVE-2022-1654 Improper Privilege Management Affects <= 2.0.7 Patched in 2.0.8
23. Medium · 6.3 JupiterX Core <= 2.0.6 - Information Disclosure, Modification, and Denial of Service ↗
    2022-05-18 CVE-2022-1659 Improper Access Control Affects <= 2.0.6 Patched in 2.0.7

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 6 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-07-10 80K+ → 70K+ down after 376 days in tier
2. 2025-06-29 90K+ → 80K+ down

Embed this report card

Drop a live Pulse card for Jupiter X Core into a readme, a review or a deck. It updates itself.

Jupiter X Core: 70K+ active installs, 1.9★ (9 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/jupiterx-core