Privilege Escalation in Javo Core Plugin for WordPress

CVE-2025-0177

What is CVE-2025-0177?

The Javo Core plugin for WordPress contains a vulnerability that allows users registering new accounts to assign themselves roles, including the administrator role. This misconfiguration permits unauthenticated attackers to gain elevated privileges simply by creating an account, exposing systems to potential exploitation. All versions up to and including 3.0.0.080 are affected, highlighting a significant security risk for websites utilizing this plugin. Proper user role management and plugin updates are essential to mitigate this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References