CVE-2025-0365

Summary

CVE-2025-0365 is a newly disclosed vulnerability affecting the Jupiter X Core plugin for WordPress. This issue allows authenticated attackers with Contributor-level access and above to perform Directory Traversal through the inline SVG feature. By exploiting this vulnerability, attackers can read the contents of arbitrary files on the server, potentially gaining access to sensitive information. The vulnerability is present in all versions up to, and including, 4.8.7. WordPress users are strongly urged to update the plugin to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.