javo_spot vulnerabilities

CVEs whose affected-version data names the javo_spot package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2017-20287High· 7.5

yesterday

Javo Spot WordPress Theme < 3.0.0 Path Traversal via admin-ajax.php fn Parameter

Javo Spot theme for WordPress before 3.0.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the fn parameter of the jvfrm_spot_get_json AJAX action. Attackers can send GET requests…

▾ TwilightJavo Themes · Javo Spotvia CVEORG