Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2025-60068

WordPress Javo Core plugin <= 3.0.0.266 - Arbitrary Code Execution vulnerability

Improper Control of Generation of Code ('Code Injection') vulnerability in javothemes Javo Core javo-core allows Code Injection.This issue affects Javo Core: from n/a through <= 3.0.0.266.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Javothemes Wordpress
Products
Javo Core Wordpress
CVE-2025-58877

WordPress Javo Core plugin <= 3.0.0.529 - Arbitrary Content Deletion vulnerability

Missing Authorization vulnerability in javothemes Javo Core javo-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Javo Core: from n/a through <= 3.0.0.529.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Javothemes Wordpress
Products
Javo Core Wordpress
CVE-2025-60111

WordPress Javo Core Plugin <= 3.0.0.266 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in javothemes Javo Core javo-core allows Authentication Bypass.This issue affects Javo Core: from n/a through <= 3.0.0.266.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Javothemes Wordpress
Products
Javo Core Wordpress
CVE-2025-58003

WordPress Javo Core Plugin <= 3.0.0.266 - Broken Access Control Vulnerability

Missing Authorization vulnerability in javothemes Javo Core javo-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Javo Core: from n/a through <= 3.0.0.266.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Javothemes Wordpress
Products
Javo Core Wordpress
CVE-2025-0177

Javo Core <= 3.0.0.080 - Unauthenticated Privilege Escalation in ajax_signup

The Javo Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.0.0.080. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticated attackers to gain elevated privileges by creating an account with the administrator role.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Javothemes
Products
Javo Core