Nigeria's IT regulator NITDA warns WordPress users to patch a severe login vulnerability that allows full website control.
TL;DR
The National Information Technology Development Agency (NITDA) issued an advisory warning WordPress administrators about a critical login screen vulnerability tracked as CVE-2026-64638.
The pre-authentication cross-site scripting flaw allows external attackers to execute malicious PHP code and take control of affected websites without needing valid credentials.
Intelligence
NITDA-CERRT recommends immediately upgrading WordPress Core to version 7.0.3, deploying a Web Application Firewall, and maintaining regular website backups.
This advisory signals NITDA's proactive surveillance of digital platforms used heavily by Nigerian businesses, startups, and media houses. ,
Website administrators and developers must prioritize updating to WordPress Core version 7.0.3 immediately to mitigate the risk of remote system compromise and data theft.
Over the next quarter, businesses relying on cloud setups will also need to align with NITDA's newly signed National Sovereign Cloud Initiative instruments to ensure local compliance.
3 companies and people in this story have tracked profiles.
Recommended reading
Picked for you by topic, popularity and relevance — not just the newest posts.
Kenya's High Court has invalidated the government's $2.1 billion sale of a 15% Safaricom stake to Vodacom.
Kenyan High Court reverses $2.1 billion Safaricom stake sale to Vodacom
Egypt and the EBRD discuss expanding green energy and agricultural investments to counter regional economic pressures.
EBRD explores expanded investment in renewable energy, agriculture in Egypt
Egyptian fintech Sahl is expanding to the UAE to enable direct bill payments for Egyptian expats.
Sahl is preparing to launch in DIFC to serve Egyptian expats in the UAE
South African digital lender GoTyme Bank calls on traditional banks to eliminate fees for PayShap instant payments up to R5,000.
South Africa’s GoTyme says instant payments don’t have to come with fees
Zambian fintech Zoyk receives regulatory approval to launch its payment aggregation platform, Zoykpay, in the DRC.
Zambian Fintech Zoyk Gets Approval to Take Zoykpay Into DRC
Pan-African investor Madica backs five pre-seed startups across Nigeria, Cameroon, Algeria, and Egypt with up to $200,000 each.
Madica Makes Fresh Investments in Nigeria’s ChipMango, Four Others