Vulnerabilidades de Uxper

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Uxper: 12 registro(s), com severidade, exploração e correções.

Togo 5 Golo 4 Sala 1 Golo Framework 1 Nuss 1

Somente exploradas (KEV) →

CVE-2026-57799 Alta · 7.5 CWE-98 13/07/2026

WordPress Nuss theme <= 1.3.6 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Nuss nuss allows PHP Local File Inclusion.This issue affects Nuss: from n/a through <= 1.3.6.

CVE-2026-57794 Alta · 7.5 CWE-98 13/07/2026

WordPress Golo Framework plugin <= 1.7.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Golo Framework golo-framework allows PHP Local File Inclusion.This issue affects Golo Framework: from n/a through <= 1.7.3.

CVE-2026-27051 Crítica · 9.8 CWE-266 25/03/2026

uxper Golo – Atribuição Incorreta de Privilégios (Escalonamento de Privilégios)

Vulnerabilidade de Atribuição Incorreta de Privilégios em uxper Golo golo permite Escalonamento de Privilégios.Este problema afeta Golo: de n/a até <= 1.7.0.

CVE-2026-23973 Alta · 7.1 CWE-79 25/03/2026

WordPress Golo theme < 1.7.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uxper Golo golo allows Reflected XSS.This issue affects Golo: from n/a through < 1.7.5.

CVE-2026-23975 Alta · 7.5 CWE-98 22/01/2026

WordPress Golo theme < 1.7.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Golo golo allows PHP Local File Inclusion.This issue affects Golo: from n/a through < 1.7.5.

CVE-2026-23974 Média · 5.3 CWE-862 22/01/2026

WordPress Golo theme < 1.7.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in uxper Golo golo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Golo: from n/a through < 1.7.5.

CVE-2025-52739 Alta · 7.1 CWE-79 31/12/2025

WordPress Sala theme <= 1.1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uxper Sala allows Reflected XSS.This issue affects Sala: from n/a through 1.1.3.

CVE-2025-62037 Média · 6.5 CWE-862 06/11/2025

WordPress Togo theme < 1.0.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4.

CVE-2025-62036 Alta · 7.1 CWE-79 06/11/2025

WordPress Togo theme < 1.0.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4.

CVE-2025-62035 Alta · 8.8 CWE-502 06/11/2025

WordPress Togo theme < 1.0.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4.

CVE-2025-62034 Alta · 8.8 CWE-266 06/11/2025

WordPress Togo theme < 1.0.4 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4.

CVE-2025-62033 Média · 6.5 CWE-862 06/11/2025

WordPress Togo theme < 1.0.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4.