Skip to content
OpenAdvisories

Vendor

Javo Themes

6 known vulnerabilities.

Products

Javo Core 5 Javo Spot 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2017-20287

    Javo Spot WordPress Theme < 3.0.0 Path Traversal via admin-ajax.php fn Parameter

    Javo Spot theme for WordPress before 3.0.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the fn parameter of the jvfrm_spot_get_json AJAX action. Attackers can send GET requests to /wp-admin/admin-aj…

    Javo Themes Javo Spot Web / CMS
  • High 7.5
    CVE-2025-58877

    WordPress Javo Core plugin <= 3.0.0.529 - Arbitrary Content Deletion vulnerability

    Missing Authorization vulnerability in javothemes Javo Core javo-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Javo Core: from n/a through <= 3.0.0.529.

    Javo Themes Javo Core
  • High 8.8
    CVE-2025-60111

    WordPress Javo Core Plugin <= 3.0.0.266 - Cross Site Request Forgery (CSRF) Vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in javothemes Javo Core javo-core allows Authentication Bypass.This issue affects Javo Core: from n/a through <= 3.0.0.266.

    Javo Themes Javo Core