NITDA warns Nigerian website owners of security flaw in Jupiter X Core WordPress plugin 

This was disclosed by the agency on its official x account.

The vulnerability, identified as CVE-2025-0366, poses a significant cybersecurity risk, potentially allowing attackers to take control of affected websites without authentication.

According to the agency, a security advisory from the Computer Emergency Readiness and Response Team Nigeria (CERNT.NG) noted that the flaw is an “unauthenticated privilege escalation vulnerability,” meaning attackers can gain administrative access or execute arbitrary code on websites using this plugin.

“A critical security flaw has been discovered in the Jupiter X Core plugin for WordPress, affecting websites using this popular theme framework,” the statement said

The impact of this security flaw is far-reaching. If exploited, attackers can gain complete control over affected WordPress sites, allowing them to:

To prevent exploitation of the vulnerability, CERNT.NG has outlined four key steps that website administrators and business owners should take immediately:

1. Update to the latest version 

2. Remove outdated or unused plugins

3. Monitor for unauthorized access

4. Use strong authentication methods

Many Nigerian businesses rely on WordPress-powered websites for e-commerce, customer engagement, and online transactions.

“This poses a significant risk to website owners, especially those handling sensitive user data,” they said.

A security breach could lead to financial losses from fraudulent transactions, legal consequences if customer data is stolen, loss of trust from customers and partners, and business downtime due to site defacement or malware infections.