Vendor
The Jawn WordPress theme, versions 1.4.2 and earlier, is vulnerable to a critical unauthenticated privilege escalation attack due to incorrect privilege assignment.