Javo Themes Javo Core Code Injection Vulnerability

Vulnerability

A code injection vulnerability has been identified in the Javo Core WordPress plugin, specifically in versions through 3.0.0.266. This vulnerability allows for arbitrary code execution due to improper control over code generation.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the server where the vulnerable plugin is installed.

Added: Dec 18, 2025, 8:52 AM
Updated: Dec 18, 2025, 4:01 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
10.0
exploitability
6.4
remediation
0.0
relevance
1.4
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.