CVE-2025-60068

CVE-2025-60068 is a WordPress plugin vulnerability in Javo Core (WordPress plugin) that allows arbitrary code execution due to improper control over code generation (code injection). Affected version range: Javo Core up to

PT-2025-52129

Improper Control of Generation of Code 'Code Injection' vulnerability in javothemes Javo Core javo-core allows Code Injection.This issue affects Javo Core: from n/a through = 3.0.0.266...

EUVD-2025-30650

Malicious code in bioql PyPI...

EUVD-2025-31289

Malicious code in bioql PyPI...

CVE-2025-60111

Cross-Site Request Forgery CSRF vulnerability in javothemes Javo Core javo-core allows Authentication Bypass.This issue affects Javo Core: from n/a through = 3.0.0.266...

CVE-2025-60111

CVE-2025-60111 is a CSRF vulnerability in the Javo Core WordPress plugin (Javo Core) that affects versions from 1.0.0? through 3.0.0.266, enabling Authentication Bypass as described in the initial document. Connected sources corroborate CSRF activity in Javo Core (<= 3.0.0.266) but do not prov...

CVE-2025-60111 WordPress Javo Core Plugin <= 3.0.0.266 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in javothemes Javo Core javo-core allows Authentication Bypass.This issue affects Javo Core: from n/a through = 3.0.0.266...

CVE-2025-60111 WordPress Javo Core Plugin <= 3.0.0.266 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in javothemes Javo Core javo-core allows Authentication Bypass.This issue affects Javo Core: from n/a through = 3.0.0.266...

WordPress plugin Javo Core 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

PT-2025-39558

Name of the Vulnerable Software and Affected Versions Javothemes Javo Core versions through 3.0.0.266 Description A Cross-Site Request Forgery CSRF issue exists in Javothemes Javo Core, potentially allowing Authentication Bypass. This occurs due to insufficient validation of requests, which could...

CVE-2025-58003

Missing Authorization vulnerability in javothemes Javo Core javo-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Javo Core: from n/a through = 3.0.0.266...

WordPress Javo Core plugin <= 3.0.0.266 - Arbitrary Code Execution vulnerability

Arbitrary Code Execution vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Javo Core versions = 3.0.0.266...