By National Information Technology Development Agency (NITDA), has uncovered a critical security flaw in the Jupiter X Core plugin for WordPress, affecting websites using this popular theme framework.
According a reported post on its Facebook, NITDA revealed that the vulnerability, identified as an unauthenticated privilege escalation flaw, allows attackers to execute arbitrary code or gain administrative access without authentication.
“If exploited, this vulnerability could allow attackers to take full control of affected WordPress sites, modify content., inject malware, or even deface websites”, the security alert from NITDA stated.
It further stated that this poses a significant risk to website owners, especially those handling sensitive user data.
A security advisory from the Computer Emergency Readiness and Response Team Nigeria (CERNT.NG) gave the following impact report to be observed:
1. Update immediately to the latest patched version 4.8.8 of the Jupiter X Core plugin.
2. Remove unused or outdated plugins in WordPress.
3. Regularly check for unauthorized admin accounts or unexpected changes on websites.
4. Use strong authentication methods.
