{"vulnerability": "cve-2026-78477", "sightings": [{"uuid": "23057d9d-77d5-4afa-bd7e-b125f10984f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78477", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117154619350415458", "content": "Privilege escalation vuln (CRITICAL, CVSS 9.8) in MVPThemes Jawn WordPress theme (\u22641.4.2): CVE-2026-78477 lets unauth users elevate to admin. Review deployments & monitor for fixes. https://radar.offseq.com/threat/cve-2026-78477-cwe-266-incorrect-privilege-assignment-in-mvpthemes-jawn-ec6b466fa423dd3f #OffSeq #WordPress #Vuln #PrivilegeEscalation", "creation_timestamp": "2026-08-25T06:00:25.077697Z"}, {"uuid": "baa63a68-486a-4488-a365-5d56ae5e7503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78477", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtv5cuxhfr2w", "content": "MVPThemes Jawn for WordPress has a CRITICAL privilege escalation flaw (CVE-2026-78477) in all versions \u22641.4.2. Unauth attackers can gain admin rights. Audit your sites now. https://radar.offseq.com/threat/cve-2026-78477-cwe-266-incorrect-privilege-assignment-in-mvpthemes-jawn-ec6b466fa423dd3f #Of...", "creation_timestamp": "2026-08-25T06:00:27.578305Z"}, {"uuid": "8e2169d6-a7ed-45a3-98e7-8099ef2c6841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78477", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hix4ievbl5oww", "content": "CVE-2026-78477 - Jawn\nCVE ID : CVE-2026-78477\n \n Published : Aug. 25, 2026, 5:31 a.m. | 20\u00a0minutes ago\n \n Description : The Jawn theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2. This makes it possible for unauthenticated at...", "creation_timestamp": "2026-08-25T06:34:31.205337Z"}, {"uuid": "152d2b84-053b-4348-bd9b-b50a31354b3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78477", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtvegbtykq23", "content": "\ud83d\udea8 CVE-2026-78477 \u2014 CVSS 9.8 CRITICAL\n\nThe Jawn theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78477\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T08:07:37.255382Z"}, {"uuid": "d9f6b434-05bc-4b83-b3cc-2a780d6536d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78477", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtvgs7qb432e", "content": "CVE-2026-78477 - jawn\nAll versions of the Jawn theme for WordPress up to 1.4.2 allow anyone on the internet to gain administrator rights on your site. This means an attacker could change settings, add\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jawn #mvpthemes #CVE #infosec", "creation_timestamp": "2026-08-25T08:50:05.141020Z"}]}