The National Information Technology Development Agency has warned website owners about a critical security vulnerability in the Jupiter X Core plugin for WordPress, which could allow attackers to take full control of affected websites.
The disclosure was made in a statement on Wednesday by the agency’s Computer Emergency Readiness and Response Team.
The vulnerability, identified as CVE-2025-0366, is an unauthenticated privilege escalation flaw that could allow attackers to execute arbitrary code or gain administrative access without authentication, NITDA said.
“If exploited, this vulnerability could enable attackers to modify content, inject malware, or deface websites, posing a significant risk to websites handling sensitive user data,” the agency said.
Website owners using the affected plugin are advised to update immediately to the latest patched version 4.8.8 and remove unused or outdated plugins.
NITDA also urged website administrators to regularly monitor for unauthorized admin accounts, unexpected changes on websites, and adopt strong authentication methods.
The agency said more information on the vulnerability is available on Infosecurity Magazine and Wordfence websites.
All rights reserved. This material, and other digital content on this website, may not be reproduced, published, broadcast, rewritten or redistributed in whole or in part without prior express written permission from PUNCH.
Contact: [email protected]
NEWS UPDATE: Get paid up to ₦120,000 per referral, payouts are sent to you within 24hours. Refer colleagues, friends, family, church members etc. Our approval process is STRICT, we desire only QUALITY REFEERALS. No fees required from you.
Click here to apply.