CVE-2024-12316 is a missing authorization vulnerability in the Jupiter X Core WordPress plugin, specifically in the export_popup_action() function. Because the function lacks a capability check, unauthenticated users can export popup templates, potentially exposing data. This affects all versions up to and including 4.8.5. The vulnerability has a CVSS score of 5.3 (medium severity) with network attack vector, low attack complexity, no privileges required, and no user interaction needed. No patch or official fix information is currently available.

The vulnerability allows unauthorized data export of popup templates by unauthenticated attackers. While it does not impact integrity or availability, it results in a confidentiality loss of potentially sensitive template data. There are no known active exploits reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the plugin and monitor for suspicious activity related to popup template exports. Avoid exposing the plugin to untrusted users or networks.