Jupiter X Core Missing Authorization Vulnerability in Library Sync Function

A vulnerability exists in the Jupiter X Core plugin for WordPress, all versions through 4.8.5, due to a lack of proper capability checks in the sync_libraries() function. This flaw allows authenticated users with Subscriber-level access and higher to synchronize libraries without authorization.

Impact

Exploitation of this vulnerability could lead to unauthorized library synchronization by authenticated users with Subscriber-level access or higher.

Remediation

Users are advised to update the Jupiter X Core plugin to version 4.8.6 or a newer patched version.