How many uxper Golo CVEs are in CISA KEV?

None of uxper Golo's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for uxper Golo vulnerabilities?

Yes — 1 of uxper Golo's CVEs have a known public exploit.

Which versions of uxper Golo are affected?

15 distinct uxper Golo versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in uxper Golo CVEs?

uxper Golo's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization), CWE-266 (Incorrect Privilege Assignment), CWE-288 (Authentication Bypass Using an Alternate Path or Channel).

How many critical uxper Golo vulnerabilities are there?

uxper Golo has 4 critical and 3 high-severity CVEs.

What is the average severity of uxper Golo CVEs?

The average CVSS base score across uxper Golo's scored CVEs is 8.3.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

uxper

8 CVEs

uxper Golo Vulnerabilities

Name: uxper Golo vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Golo by uxper.

8

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

8.3

Avg CVSS

2021–2026

Last updated March 25, 2026

Overview

uxper Golo has 8 published CVE records since 2021, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 8.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting uxper Golo, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of uxper Golo's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical4

High3

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of uxper Golo's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of uxper Golo's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every uxper Golo version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 1.7.53 CVEs
>= 1.7.53 CVEs
<= 1.7.02 CVEs
< 1.6.111 CVE
<= 1.7.11 CVE
>= 1.7.11 CVE
>= 1.7.21 CVE
1.1.5 <= v <= 1.1.51 CVE

Fixed in

> 1.7.53 CVEs
1.7.53 CVEs
> 1.7.02 CVEs
> 1.7.11 CVE
1.6.111 CVE
1.7.11 CVE
1.7.21 CVE

Find a version

8 CVEs

Sort

WordPress Golo theme <= 1.7.0 - Privilege Escalation vulnerability
CVE-2026-27051
Patch
CWE-266
Critical · CVSS 9.8
EPSS 0.3% (25th pct)2026-03-25
WordPress Golo theme < 1.7.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-23973
Patch
CWE-79
High · CVSS 7.1
EPSS 0.2% (8th pct)2026-03-25
WordPress Golo theme < 1.7.5 - Local File Inclusion vulnerability
CVE-2026-23975
Patch
CWE-98
High · CVSS 7.5
EPSS 0.4% (31th pct)2026-01-22
WordPress Golo theme < 1.7.5 - Broken Access Control vulnerability
CVE-2026-23974
Patch
CWE-862
Medium · CVSS 5.3
EPSS 0.2% (11th pct)2026-01-22
WordPress Golo Theme <= 1.7.0 - Broken Authentication Vulnerability
CVE-2025-54725
Patch
CWE-288
Critical · CVSS 9.8
EPSS 0.4% (32th pct)2025-08-28
WordPress Golo Theme <= 1.7.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-54724
Patch
CWE-79
High · CVSS 7.1
EPSS 0.2% (7th pct)2025-08-28
Golo - Directory & Listing, Travel WordPress Theme <= 1.6.10 - Missing Authorization to Privilege Escalation via Unauthenticated Arbitrary User Password Change
CVE-2024-12876
Patch
CWE-862
Critical · CVSS 9.8
EPSS 0.4% (34th pct)2025-03-07
Critical vulnerability · 2021-05-12
CVE-2020-23790
Public exploit
Critical · CVSS 9.8
EPSS 1.5% (72th pct)2021-05-12

Common weakness types

The CWE weakness categories most often found in uxper Golo CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many uxper Golo CVEs were published each year.

2021

1

2025

3

2026

4

Other uxper products

Browse vulnerabilities for other products by uxper.

Nuss5 CVEs Togo5 CVEs civi4 CVEs Sala4 CVEs Civi - Job Board & Freelance Marketplace WordPress Theme3 CVEs Civi Framework2 CVEs Golo - City Travel Guide WordPress Theme2 CVEs Uxper Booking2 CVEs

All uxper vulnerabilities

Frequently asked questions

Common questions about uxper Golo vulnerabilities.

How many CVEs does uxper Golo have?: uxper Golo has 8 published CVE records since 2021.
How many uxper Golo CVEs are in CISA KEV?: None of uxper Golo's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for uxper Golo vulnerabilities?: Yes — 1 of uxper Golo's CVEs have a known public exploit.
Which versions of uxper Golo are affected?: 15 distinct uxper Golo versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in uxper Golo CVEs?: uxper Golo's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization), CWE-266 (Incorrect Privilege Assignment), CWE-288 (Authentication Bypass Using an Alternate Path or Channel).
How many critical uxper Golo vulnerabilities are there?: uxper Golo has 4 critical and 3 high-severity CVEs.
What is the average severity of uxper Golo CVEs?: The average CVSS base score across uxper Golo's scored CVEs is 8.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track uxper Golo vulnerabilities

Monitor new uxper Golo vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing