What is CVE-2026-78477?

CVE-2026-78477 is a critical-severity vulnerability in Mvpthemes Jawn, classified under Incorrect Privilege Assignment. CVSS score: 9.8/10. Published 2026-08-25.

How severe is CVE-2026-78477?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Privilege escalation in Mvpthemes Jawn

CVE-2026-78477

The Jawn theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Mvpthemes Jawn

Weakness classification (CWE)

CWE-266 — Incorrect Privilege Assignment

References

security@wordfence.com
security@wordfence.com

Frequently asked questions

What is CVE-2026-78477?: CVE-2026-78477 is a critical-severity vulnerability in Mvpthemes Jawn, classified under Incorrect Privilege Assignment. CVSS score: 9.8/10. Published 2026-08-25.
How severe is CVE-2026-78477?: Critical severity. CVSS v3 base score is 9.8 out of 10.