CVE-2024-12033

Name of the Vulnerable Software and Affected Versions Jupiter X Core plugin for WordPress versions up to, and including, 4.8.5

Description The issue is related to a missing capability check on the sync libraries() function, allowing authenticated attackers with Subscriber-level access and above to sync libraries. This enables unauthorized access to the plugin's functionality.

Recommendations For versions up to, and including, 4.8.5, consider disabling the sync libraries() function until a patch is available to prevent unauthorized library synchronization. At the moment, there is no information about a newer version that contains a fix for this vulnerability.