CVE-2024-12316: Jupiter X Core <= 4.8.5 - Missing Authorization to Unauthenticated Popup Template Export
The Jupiter X Core plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the exportpopupaction() function in all versions up to, and including, 4.8.5. This makes it possible for unauthenticated attackers to export popup templates.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12316?
CVE-2024-12316 is classified as a high severity vulnerability due to its potential for unauthorized access to sensitive data.
How do I fix CVE-2024-12316?
To fix CVE-2024-12316, update the Jupiter X Core plugin to version 4.8.6 or later, which contains the necessary security enhancements.
What impact does CVE-2024-12316 have on my WordPress site?
CVE-2024-12316 allows unauthenticated attackers to export popup templates, which could lead to exposure of sensitive information on your site.
Which versions of Jupiter X Core are affected by CVE-2024-12316?
CVE-2024-12316 affects all versions of the Jupiter X Core plugin up to and including 4.8.5.
Is there a workaround for CVE-2024-12316 if I cannot update immediately?
A temporary workaround for CVE-2024-12316 is to disable the Jupiter X Core plugin until you can apply the update to a secure version.