The National Information Technology Development Agency has issued a warning to Nigerian website owners regarding a critical security vulnerability in the Jupiter X Core plugin for WordPress.
This was disclosed by NITDA via its official X account.
CVE-2025-0366 is a critical security flaw in the Jupiter X Core plugin for WordPress, allowing attackers to take control of vulnerable websites without authentication. The issue stems from improper file type validation, enabling unauthorized file uploads and remote code execution.