Advisories · Technology
javothemes Javo Core.
Every CVE that names javothemes Javo Core among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
WordPress Javo Core plugin <= 3.0.0.266 - Arbitrary Code Execution vulnerability
- javothemes Javo Core
- Code injection
- CVSS 7.5 High
WordPress Javo Core plugin <= 3.0.0.529 - Arbitrary Content Deletion vulnerability
- javothemes Javo Core
- Broken access control
- CVSS 8.8 High
WordPress Javo Core Plugin <= 3.0.0.266 - Cross Site Request Forgery (CSRF) Vulnerability
- javothemes Javo Core
- Cross-site request forgery (CSRF)
- CVSS 5.3 Medium
WordPress Javo Core Plugin <= 3.0.0.266 - Broken Access Control Vulnerability
- javothemes Javo Core
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
Javo Core <= 3.0.0.080 - Unauthenticated Privilege Escalation in ajax_signup
- javothemes Javo Core
- Privilege escalation