CVE-2026-78477

CriticalCVSS 9.8

Published: 25/08/2026(UTC)Translated: 25/08/2026(UTC)NVD NIST

Summary

The Jawn theme for WordPress is vulnerable to Privilege Escalation in all versions up to and including 1.4.2. This allows unauthenticated attackers to elevate their privileges to administrator level.

Risk Assessment

An unauthenticated attacker can gain full control over the WordPress installation, potentially leading to site takeover, malicious code injection, or data theft.

Recommendation

Immediately update the Jawn theme to the latest available version that includes a fix for this vulnerability.

Original NVD description (English source)

The Jawn theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator.