Skip to content
OpenAdvisories

Vendor

uxper

33 known vulnerabilities.

Products

Golo 6 Togo 5 Nuss 5 Sala 4 Civi - Job Board & Freelance Marketplace WordPress Theme 3 Golo - City Travel Guide WordPress Theme 2 Uxper Booking 2 Civi Framework 2 Golo Framework 2 Civi 1 Sala - Startup & SaaS WordPress Theme 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-27051

    WordPress Golo theme <= 1.7.0 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in uxper Golo golo allows Privilege Escalation.This issue affects Golo: from n/a through <= 1.7.0.

    uxper Golo
  • Critical 9.8
    CVE-2025-54725

    WordPress Golo Theme <= 1.7.0 - Broken Authentication Vulnerability

    Authentication Bypass Using an Alternate Path or Channel vulnerability in uxper Golo golo allows Authentication Abuse.This issue affects Golo: from n/a through <= 1.7.0.

    uxper Golo
  • Critical 9.8
    CVE-2025-4606 Public exploit

    Sala - Startup & SaaS WordPress Theme <= 1.1.4 - Unauthenticated Privilege Escalation via Password Reset/Account Takeover

    The Sala - Startup & SaaS WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.4. This is due to the theme not properly validating a user's identity prior to updating their de…

    uxper Sala - Startup & SaaS WordPress Theme Web / CMS
  • Critical 9.8
    CVE-2025-4797

    Golo <= 1.7.0 - Authentication Bypass to Account Takeover

    The Golo - City Travel Guide WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.7.0. This is due to the plugin not properly validating a user's identity prior to setting an au…

    uxper Golo - City Travel Guide WordPress Theme Web / CMS
  • Critical 9.8
    CVE-2024-13771

    Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 - Authentication Bypass via Password Update

    The Civi - Job Board & Freelance Marketplace WordPress Theme plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.1.4. This is due to a lack of user validation before changing a password. This makes it possible f…

    uxper Civi - Job Board & Freelance Marketplace WordPress Theme Web / CMS
  • Critical 9.8
    CVE-2024-12876

    Golo - Directory & Listing, Travel WordPress Theme <= 1.6.10 - Missing Authorization to Privilege Escalation via Unauthenticated Arbitrary User Password Change

    The Golo - City Travel Guide WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.10. This is due to the plugin not properly validating a user's identity prior to updating the…

    uxper Golo - City Travel Guide WordPress Theme Web / CMS