The Javo Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.0.0.080. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticated attackers to gain elevated privileges by creating an account with the administrator role.
References
Configurations
History
13 Mar 2025, 13:05
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:javothemes:javo_core:*:*:*:*:*:wordpress:*:* | |
| First Time |
Javothemes javo Core
Javothemes |
|
| CWE | NVD-CWE-noinfo | |
| References | () https://themeforest.net/item/javo-directory-wordpress-theme/8390513#item-description__update-history - Product | |
| References | () https://www.wordfence.com/threat-intel/vulnerabilities/id/7d636768-37b4-4343-9028-30e7b1f997f2?source=cve - Third Party Advisory |
08 Mar 2025, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-08 09:15
Updated : 2025-03-13 13:05
NVD link : CVE-2025-0177
Mitre link : CVE-2025-0177
JSON object : View
Products Affected
javothemes
- javo_core
CWE