CVE-2025-58003: WordPress Javo Core Plugin <= 3.0.0.266 - Broken Access Control Vulnerability
Missing Authorization vulnerability in javothemes Javo Core allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Javo Core: from n/a through 3.0.0.266.
Other sources
Missing Authorization vulnerability in javothemes Javo Core javo-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Javo Core: from n/a through <= 3.0.0.266.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58003?
CVE-2025-58003 is classified as a high severity vulnerability due to its potential for exploitation through incorrect access control configurations.
How do I fix CVE-2025-58003?
To fix CVE-2025-58003, ensure that access control security levels are correctly configured and upgrade to the latest version of Javo Core or the Javo Core Plugin.
Which versions of Javo Core are affected by CVE-2025-58003?
CVE-2025-58003 affects Javo Core versions up to and including 3.0.0.266.
What type of vulnerability is CVE-2025-58003?
CVE-2025-58003 is a Missing Authorization vulnerability that allows unauthorized access due to improperly configured security levels.
Who is the vendor for CVE-2025-58003?
The vendor of the affected software is Javothemes, which produces the Javo Core and Javo Core Plugin.