Code Injection Vulnerability in Javo Core by Javothemes
CVE-2025-60068

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Javo Core
Vendor
CVE Published:
18 December 2025

What is CVE-2025-60068?

A Code Injection vulnerability affects Javo Core, a product by Javothemes, allowing attackers to manipulate the flow of information and execute arbitrary code on affected systems. This security flaw impacts versions up to 3.0.0.266, presenting a severe risk as unauthorized code execution can lead to data breaches, loss of integrity, and compromised web applications. It is crucial for users of Javo Core to apply security patches and updates to mitigate risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Javo Core <= n/a

References

https://patchstack.com/database/Wordpress/Plugin/javo-cor...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Trương Hữu Phúc (truonghuuphuc) | Patchstack Bug Bounty Program
JSON
.