Javo Core vulnerabilities

3 known vulnerabilities in Javo Core from Javothemes. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Javo Core: Missing Authorization

  CVE-2025-58877Dec 18, 2025Javothemes

  Missing Authorization vulnerability in javothemes Javo Core javo-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Javo Core: from n/a through <= 3.0.0.529.

• 8.8 High severity

  Javo Core: Cross-Site Request Forgery

  CVE-2025-60111Sep 26, 2025Javothemes

  Cross-Site Request Forgery (CSRF) vulnerability in javothemes Javo Core javo-core allows Authentication Bypass.This issue affects Javo Core: from n/a through <= 3.0.0.266.

• 9.8 Critical severity

  Javo Core: Improper Privilege Management

  CVE-2025-0177Mar 8, 2025Javothemes

  The Javo Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.0.0.080. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticate