CVE Intelligence

Javothemes vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Javothemes products: 3 record(s), with severity, exploitation and fixes.

Javo Core 3

Exploited only (KEV) →

CVE-2025-60068 Medium · 6.5 CWE-94 Dec 18, 2025
WordPress Javo Core plugin <= 3.0.0.266 - Arbitrary Code Execution vulnerability
Improper Control of Generation of Code ('Code Injection') vulnerability in javothemes Javo Core javo-core allows Code Injection.This issue affects Javo Core: from n/a through <= 3.0.0.266.
CVE-2025-58877 High · 7.5 CWE-862 Dec 18, 2025
WordPress Javo Core plugin <= 3.0.0.529 - Arbitrary Content Deletion vulnerability
Missing Authorization vulnerability in javothemes Javo Core javo-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Javo Core: from n/a through <= 3.0.0.529.
CVE-2025-60111 High · 8.8 CWE-352 Sep 26, 2025
WordPress Javo Core Plugin <= 3.0.0.266 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in javothemes Javo Core javo-core allows Authentication Bypass.This issue affects Javo Core: from n/a through <= 3.0.0.266.