CVE-2024-12033: Jupiter X Core <= 4.8.5 - Missing Authorization to Authenticated Library Sync
The Jupiter X Core plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the synclibraries() function in all versions up to, and including, 4.8.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to sync libraries
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12033?
CVE-2024-12033 has been rated as a medium severity vulnerability due to unauthorized access risks.
How do I fix CVE-2024-12033?
To fix CVE-2024-12033, update the Jupiter X Core plugin to version 4.8.6 or later.
Who is affected by CVE-2024-12033?
CVE-2024-12033 affects all users of the Jupiter X Core plugin for WordPress up to and including version 4.8.5.
What type of vulnerability is CVE-2024-12033?
CVE-2024-12033 is a vulnerability that allows unauthorized access due to a missing capability check.
What are the consequences of exploiting CVE-2024-12033?
Exploiting CVE-2024-12033 could allow authenticated attackers to perform unauthorized actions on the affected WordPress site.