theme

Javo Spot Vulnerabilities

1 known security issue reported for the Javo Spot WordPress theme. Most recent disclosed Feb 9, 2017.

1 high

Running Javo Spot on your site? Check whether your installed version is affected.

Javo Spot < 3.0.0 - Directory Traversal

high

The Javo Spot theme for WordPress is vulnerable to Directory Traversal in versions up to 3.0.0 via the 'fn' parameter found in the jvfrm_spot_get_json() function called via a nopriv AJAX action. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain...

CVSS:: 7.5
Affected:: up to 3.0.0
Fixed in:: 3.0.0
Disclosed:: Feb 9, 2017

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database