Uxper Golo vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Uxper Golo: 4 record(s), with affected versions and fixes.

CVE-2026-27051 Critical · 9.8 CWE-266 Mar 25, 2026

uxper Golo – Incorrect Privilege Assignment (Privilege Escalation)

Incorrect Privilege Assignment vulnerability in uxper Golo golo allows Privilege Escalation.This issue affects Golo: from n/a through <= 1.7.0.

CVE-2026-23973 High · 7.1 CWE-79 Mar 25, 2026

WordPress Golo theme < 1.7.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uxper Golo golo allows Reflected XSS.This issue affects Golo: from n/a through < 1.7.5.

CVE-2026-23975 High · 7.5 CWE-98 Jan 22, 2026

WordPress Golo theme < 1.7.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Golo golo allows PHP Local File Inclusion.This issue affects Golo: from n/a through < 1.7.5.

CVE-2026-23974 Medium · 5.3 CWE-862 Jan 22, 2026

WordPress Golo theme < 1.7.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in uxper Golo golo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Golo: from n/a through < 1.7.5.