Javo Core WordPress Plugin Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the Javo Core plugin for WordPress, affecting all versions through 3.0.0.080. The vulnerability arises because the plugin allows users registering new accounts to choose their own roles. This functionality can be exploited by unauthenticated attackers to create accounts with administrative privileges.

Impact

Exploitation of this vulnerability allows unauthenticated users to gain administrative privileges on the WordPress site.

Remediation

Users are advised to update the Javo Core plugin to version 3.0.0.266 or a newer patched version.