Privilege Escalation in Javo Core Plugin for WordPress

CVE-2025-0177

What is CVE-2025-0177?

The Javo Core plugin for WordPress contains a vulnerability that allows users registering new accounts to assign themselves roles, including the administrator role. This misconfiguration permits unauthenticated attackers to gain elevated privileges simply by creating an account, exposing systems to potential exploitation. All versions up to and including 3.0.0.080 are affected, highlighting a significant security risk for websites utilizing this plugin. Proper user role management and plugin updates are essential to mitigate this vulnerability.

References