CVE-2025-0177

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-0177", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-01-02T18:41:56.474Z", "datePublished": "2025-03-08T08:22:57.176Z", "dateUpdated": "2026-04-08T17:02:54.532Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:02:54.532Z"}, "affected": [{"vendor": "javothemes", "product": "Javo Core", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "3.0.0.080", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Javo Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.0.0.080. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticated attackers to gain elevated privileges by creating an account with the administrator role."}], "title": "Javo Core <= 3.0.0.080 - Unauthenticated Privilege Escalation in ajax_signup", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/7d636768-37b4-4343-9028-30e7b1f997f2?source=cve"}, {"url": "https://themeforest.net/item/javo-directory-wordpress-theme/8390513#item-description__update-history"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-269 Improper Privilege Management", "cweId": "CWE-269", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL"}}], "credits": [{"lang": "en", "type": "finder", "value": "Tonn"}], "timeline": [{"time": "2025-01-09T00:00:00.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2025-03-07T00:00:00.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-03-10T15:55:29.762921Z", "id": "CVE-2025-0177", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-10T15:55:37.070Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-0177", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-03-10T15:55:29.762921Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-10T15:55:33.712Z"}}], "cna": {"title": "Javo Core <= 3.0.0.080 - Unauthenticated Privilege Escalation in ajax_signup", "credits": [{"lang": "en", "type": "finder", "value": "Tonn"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "javothemes", "product": "Javo Core", "versions": [{"status": "affected", "version": "*", "versionType": "semver", "lessThanOrEqual": "3.0.0.080"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-01-09T00:00:00.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2025-03-07T00:00:00.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/7d636768-37b4-4343-9028-30e7b1f997f2?source=cve"}, {"url": "https://themeforest.net/item/javo-directory-wordpress-theme/8390513#item-description__update-history"}], "descriptions": [{"lang": "en", "value": "The Javo Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.0.0.080. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticated attackers to gain elevated privileges by creating an account with the administrator role."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-269", "description": "CWE-269 Improper Privilege Management"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2025-03-08T08:22:57.176Z"}}}, "cveMetadata": {"cveId": "CVE-2025-0177", "state": "PUBLISHED", "dateUpdated": "2025-03-10T15:55:37.070Z", "dateReserved": "2025-01-02T18:41:56.474Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-03-08T08:22:57.176Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Javo Core", "vendor": "javothemes", "versions": [{"lessThanOrEqual": "3.0.0.080", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:javothemes:javo_core:*:*:*:*:*:wordpress:*:*", "matchCriteriaId": "1E9DD18E-5FF3-4457-B9A5-4908CE59A403", "versionEndExcluding": "3.0.0.266", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Javo Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.0.0.080. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticated attackers to gain elevated privileges by creating an account with the administrator role."}, {"lang": "es", "value": "El complemento Javo Core para WordPress es vulnerable a la escalada de privilegios en todas las versiones hasta la 3.0.0.080 incluida. Esto se debe a que el complemento permite a los usuarios que registran cuentas nuevas configurar su propio rol. Esto hace posible que atacantes no autenticados obtengan privilegios elevados al crear una cuenta con el rol de administrador."}], "id": "CVE-2025-0177", "lastModified": "2026-06-17T08:26:01.263", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "security@wordfence.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-0177", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-03-10T15:55:29.762921Z", "version": "2.0.3"}}]}, "published": "2025-03-08T09:15:31.420", "references": [{"source": "security@wordfence.com", "tags": ["Product"], "url": "https://themeforest.net/item/javo-directory-wordpress-theme/8390513#item-description__update-history"}, {"source": "security@wordfence.com", "tags": ["Third Party Advisory"], "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/7d636768-37b4-4343-9028-30e7b1f997f2?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-269"}], "source": "security@wordfence.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-22T13:25:49.698820+00:00", "value": {"mitigation_remediation": ["Upgrade the Javo Core plugin to any version newer than 3.0.0.080 that no longer allows role assignment during registration.", "If an upgrade is not immediately possible, restrict or disable the ajax_signup endpoint or enforce that only authenticated users can assign roles.", "After remediation, scan the site\u2019s user database for administrator accounts created without justification and revert or delete those accounts."], "summary": {"action": "Immediate Patch", "impact": "Privilege escalation to administrator"}, "threat_synthesis": {"affected_systems": "The vulnerability affects the Javo Core plugin from javothemes, all releases up to and including version 3.0.0.080, on any WordPress installation running those versions.", "description_and_impact": "The Javo Core WordPress plugin contains a flaw that lets any visitor create a new account and assign the administrator role during registration. The attacker does not need to be logged in; by sending a request to the ajax_signup endpoint the plugin stores the supplied role without validation. If the supplied role is administrator, the attacker gains full control over the WordPress site.", "risk_and_exploitability": "The CVSS score of 9.8 indicates a critically high risk. The EPSS value of less than 1% suggests that exploitation is currently unlikely, but the flaw is publicly known and could be used in targeted attacks. It is not listed in CISA\u2019s KEV catalog. The likely attack vector is an unauthenticated remote request to the plugin\u2019s ajax_signup endpoint to set an admin role."}}}}, "created": "2026-04-22T13:30:17.928418+00:00", "updated": "2026-04-22T13:30:17.928434+00:00", "vendors": []}