A security flaw has been identified in the Jawn theme for WordPress, a popular tool used to customize the design and features of WordPress websites. Every version of this theme up to and including version 1.4.2 is impacted by the vulnerability.
This issue allows people who do not have any existing login credentials for your WordPress site to gain full administrator-level access to it. Administrators have complete control over a WordPress site, so an attacker with this level of access could change your site’s content, steal private visitor or business data, install malicious code, or take other actions that could harm your site and its visitors.
Source: NVD (National Vulnerability Database) — https://nvd.nist.gov/vuln/detail/CVE-2026-78477
