External risk intelligence

Jawn Theme for WordPress Privilege Escalation Vulnerability

CVE advisorySeverity: CRITICAL (CVSS 9.8)

CVE-2026-78477

The vulnerability affects a WordPress theme. WordPress sites are frequently deployed as public-facing web applications, making the theme's functionality, including unauthenticated entry points, readily accessible via the public internet as part of the standard web server surface.

Privilege Escalation

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

External exposure likelihood

Horizon Alert

Summary of the vulnerability and why it matters

A critical security vulnerability has been identified in the Jawn theme for WordPress, allowing unauthorized individuals to gain administrator privileges. This means a potential attacker could take full control of a WordPress site without needing any prior access or credentials. The main concern is to determine if this theme is in use within our organization and, if so, to assess the extent of our exposure.

Unauthenticated users can become site administrators.
Affects WordPress sites using the Jawn theme.
Confirm relevance and assess potential exposure.

Attack Path

How an attacker could exploit the issue

An attacker could exploit this vulnerability by reaching the Jawn WordPress theme through the internet without needing any prior authentication. By interacting with a specific, yet-to-be-detailed, part of the theme, an unauthenticated user could gain administrator-level privileges, allowing them to fully control the website.

No authentication required to start.
Triggered by interacting with theme.
Risk of full website compromise.

Live Threat

Current exploitation, exposure, and threat context

This vulnerability in the Jawn WordPress theme could allow an unauthenticated attacker to gain administrator privileges on a site when the theme is in use. This could lead to unauthorized access and modification of website content and data.

Website administrator access.
Unauthenticated access to theme functionality.
Complete site compromise.

Operational Fix

Recommended remediation, mitigation, and detection steps

The Jawn WordPress theme's privilege escalation vulnerability necessitates immediate attention from teams managing WordPress deployments. Owners of websites using this theme must first identify all instances of the Jawn theme, confirm if these sites are publicly accessible and business-critical, and then locate the accountable party for remediation. Planning for a secure update or implementing compensating controls should follow based on the assessed risk.

WordPress site owners should own the issue.
Verify public-facing Jawn theme exposure.
Plan for theme updates or risk reduction.

Supplementary metadata

CVSS vector

Validate whether this threat affects your internet-facing exposure.

Halo Threat Intelligence helps prioritize remediation with Halo Surface Signal and H/A/L/O context. Start exposure validation with a free external attack surface trial.

Free EASM Trial See How Signal Works

Frequently asked questions

What is the Jawn theme for WordPress?

The Jawn theme is a design template for the WordPress content management system. It controls the visual layout and user experience of a website. When installed, it adds specific code to handle site presentation and functionality, which is where this security issue resides.

What does CVE-2026-78477 mean by privilege escalation?

This vulnerability is classified as Incorrect Privilege Assignment (CWE-266). It means the software fails to correctly check who a user is before granting them high-level permissions. In this case, it allows an unauthenticated visitor to bypass security controls and trick the system into assigning them the full administrative rights usually reserved for site owners.

How is this vulnerability triggered?

An attacker initiates this by interacting with specific parts of the Jawn theme via the network. Because the flaw exists within the theme's own code, it does not require a valid login or any previous account access. Simply visiting the site and triggering the affected function is sufficient; normal site browsing or valid logins are not required to set the process in motion.

Why should I worry if my site uses Jawn?

Halo Surface Signal indicates that WordPress sites are typically deployed as public-facing web applications. Since the Jawn theme is accessible over the public internet, it sits on your network perimeter. This means an attacker anywhere in the world could potentially reach and exploit the theme without needing to be on your internal network.

What are the first steps to address this?

First, conduct an inventory to identify all websites in your environment that have the Jawn theme active. Once you have identified these instances, prioritize those that are reachable from the public internet. Coordinate with the teams managing those specific sites to plan for a theme update or to implement temporary controls to restrict access until a secure version is deployed.

References

Written by Nicholas Merritt

Nicholas Merritt is VP of Security Solutions at Halo Security. With more than 25 years across application security, vulnerability prioritization, and offensive security, he helps teams translate threat data into practical exposure validation and remediation focus. He authors Halo Threat Intelligence CVE advisories using Halo Surface Signal and H/A/L/O context to prioritize internet-facing risk.