CVE-2025-0177

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

T

he Javo Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.0.0.080. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticated attackers to gain elevated privileges by creating an account with the administrator role.

References

Link	Resource
https://themeforest.net/item/javo-directory-wordpress-theme/8390513#item-description__update-history	Product
https://www.wordfence.com/threat-intel/vulnerabilities/id/7d636768-37b4-4343-9028-30e7b1f997f2?source=cve	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:javothemes:javo_core:*:*:*:*:*:wordpress:*:*

History

13 Mar 2025, 13:05

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-03-08 09:15

Updated : 2025-03-13 13:05

NVD link : CVE-2025-0177

Mitre link : CVE-2025-0177

CVE.ORG link : CVE-2025-0177

JSON object : View

Products Affected

javo_core

CWE

CWE-269

Improper Privilege Management

NVD-CWE-noinfo

{"id": "CVE-2025-0177", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2025-03-08T09:15:31.420", "references": [{"url": "https://themeforest.net/item/javo-directory-wordpress-theme/8390513#item-description__update-history", "tags": ["Product"], "source": "[email protected]"}, {"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/7d636768-37b4-4343-9028-30e7b1f997f2?source=cve", "tags": ["Third Party Advisory"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-269"}]}, {"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "The Javo Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.0.0.080. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticated attackers to gain elevated privileges by creating an account with the administrator role."}, {"lang": "es", "value": "El complemento Javo Core para WordPress es vulnerable a la escalada de privilegios en todas las versiones hasta la 3.0.0.080 incluida. Esto se debe a que el complemento permite a los usuarios que registran cuentas nuevas configurar su propio rol. Esto hace posible que atacantes no autenticados obtengan privilegios elevados al crear una cuenta con el rol de administrador."}], "lastModified": "2025-03-13T13:05:42.730", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:javothemes:javo_core:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "1E9DD18E-5FF3-4457-B9A5-4908CE59A403", "versionEndExcluding": "3.0.0.266"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}