javothemes

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

javothemes records in CISA KEV

No javothemes vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Javo Core · all components

TI-2025-00137 CVE-2025-0177 · GHSA-q5ph-93qv-88vc

MEDIUM 49

The Javo Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.0.0.080.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00451 Published 2025-03-08 No fix listed CWE-269