Javothemes Javo Core
5 CVEs affecting Javothemes Javo Core. Latest disclosed: 2025-12-18. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-0177 | Critical | 9.8 | 2025-03-08 | The Javo Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.0.0.080. This is due to the plugin allowing us… |
CVE-2025-60111 | High | 8.8 | 2025-09-26 | Cross-Site Request Forgery (CSRF) vulnerability in javothemes Javo Core javo-core allows Authentication Bypass.This issue affects Javo Core: from n/a through <… |
CVE-2025-58877 | High | 7.5 | 2025-12-18 | Missing Authorization vulnerability in javothemes Javo Core javo-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2025-60068 | Medium | 6.5 | 2025-12-18 | Improper Control of Generation of Code ('Code Injection') vulnerability in javothemes Javo Core javo-core allows Code Injection.This issue affects Javo Core: f… |
CVE-2025-58003 | Medium | 5.3 | 2025-09-22 | Missing Authorization vulnerability in javothemes Javo Core javo-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |