Javothemes vulnerabilities
We track 3 vulnerabilities in Javothemes products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 18, 2025.
Latest Javothemes vulnerabilities
- 7.5 High severity
Javo Core: Missing Authorization
Missing Authorization vulnerability in javothemes Javo Core javo-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Javo Core: from n/a through <= 3.0.0.529.
- 8.8 High severity
Javo Core: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in javothemes Javo Core javo-core allows Authentication Bypass.This issue affects Javo Core: from n/a through <= 3.0.0.266.
- 9.8 Critical severity
Javo Core: Improper Privilege Management
The Javo Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.0.0.080. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticate