Uxper vulnerabilities

Products

• Golo 8
• Nuss 5
• Togo 5
• Civi 4
• Sala 4
• Civi - Job Board & Freelance Marketplace Wordpress Theme 3
• Civi Framework 2
• Golo - City Travel Guide Wordpress Theme 2
• Golo Framework 2
• Booking 2

Newest

• uxper golo framework WordPress Golo Framework plugin < 1.7.5 - Local File Inclusion vulnerability CVE-2026-28150 8.1 HighAugust 20, 2026
• uxper civi framework WordPress Civi Framework plugin <= 2.2.0 - Broken Access Control vulnerability CVE-2026-65525 5.3 MediumJuly 23, 2026
• uxper civi WordPress Civi theme <= 2.2.4 - Broken Access Control vulnerability CVE-2026-65476 5.3 MediumJuly 23, 2026
• uxper nuss WordPress Nuss theme <= 1.3.6 - Local File Inclusion vulnerability CVE-2026-57799 7.5 HighJuly 13, 2026
• uxper golo framework WordPress Golo Framework plugin <= 1.7.3 - Local File Inclusion vulnerability CVE-2026-57794 7.5 HighJuly 13, 2026
• uxper golo WordPress Golo theme <= 1.7.0 - Privilege Escalation vulnerability CVE-2026-27051 9.8 CriticalMarch 25, 2026
• uxper golo WordPress Golo theme < 1.7.5 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-23973 7.1 HighMarch 25, 2026
• uxper golo WordPress Golo theme < 1.7.5 - Local File Inclusion vulnerability CVE-2026-23975 7.5 HighJanuary 22, 2026
• uxper golo WordPress Golo theme < 1.7.5 - Broken Access Control vulnerability CVE-2026-23974 5.3 MediumJanuary 22, 2026
• uxper sala WordPress Sala theme <= 1.1.3 - Cross Site Scripting (XSS) vulnerability CVE-2025-52739 7.1 HighDecember 31, 2025
• uxper togo WordPress Togo theme < 1.0.4 - Broken Access Control vulnerability CVE-2025-62037 6.5 MediumNovember 6, 2025
• uxper togo WordPress Togo theme < 1.0.4 - Cross Site Scripting (XSS) vulnerability CVE-2025-62036 7.1 HighNovember 6, 2025
• uxper togo WordPress Togo theme < 1.0.4 - PHP Object Injection vulnerability CVE-2025-62035 8.8 HighNovember 6, 2025
• uxper togo WordPress Togo theme < 1.0.4 - Privilege Escalation vulnerability CVE-2025-62034 8.8 HighNovember 6, 2025
• uxper togo WordPress Togo theme < 1.0.4 - Broken Access Control vulnerability CVE-2025-62033 6.5 MediumNovember 6, 2025
• uxper sala WordPress Sala Theme <= 1.1.6 - Local File Inclusion Vulnerability CVE-2025-54709 8.1 HighSeptember 9, 2025
• uxper golo WordPress Golo Theme <= 1.7.0 - Broken Authentication Vulnerability CVE-2025-54725 9.8 CriticalAugust 28, 2025
• uxper golo WordPress Golo Theme <= 1.7.1 - Cross Site Scripting (XSS) Vulnerability CVE-2025-54724 7.1 HighAugust 28, 2025
• uxper booking WordPress Uxper Booking Plugin <= 1.3.3 - Local File Inclusion Vulnerability CVE-2025-49892 8.1 HighAugust 20, 2025
• uxper booking WordPress Uxper Booking Plugin <= 1.3.3 - SQL Injection Vulnerability CVE-2025-49891 8.5 HighAugust 20, 2025
• uxper nuss WordPress Nuss Theme <= 1.3.3 - Local File Inclusion Vulnerability CVE-2025-49894 8.1 HighAugust 20, 2025
• uxper nuss WordPress Nuss Theme <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability CVE-2025-49893 7.1 HighAugust 20, 2025
• uxper sala WordPress Sala theme <= 1.1.3 - Broken Access Control Vulnerability CVE-2025-52803 7.5 HighJuly 16, 2025
• uxper nuss WordPress Nuss theme <= 1.3.7.1 - Broken Access Control Vulnerability CVE-2025-52804 7.5 HighJuly 16, 2025
• uxper sala - startup & saas wordpress theme Sala - Startup & SaaS WordPress Theme <= 1.1.4 - Unauthenticated Privilege Escalation via Password Reset/Account Takeover CVE-2025-4606 Public exploit 9.8 CriticalJuly 9, 2025
• uxper sala WordPress Sala theme <= 1.1.3 - PHP Object Injection Vulnerability CVE-2025-52826 8.8 HighJune 27, 2025
• uxper nuss WordPress Nuss theme <= 1.3.3 - PHP Object Injection Vulnerability CVE-2025-52827 8.8 HighJune 27, 2025
• uxper civi framework WordPress Civi Framework plugin <= 2.1.6 - Cross Site Request Forgery (CSRF) to User Deactivation vulnerability CVE-2025-49511 7.1 HighJune 10, 2025
• uxper golo - city travel guide wordpress theme Golo <= 1.7.0 - Authentication Bypass to Account Takeover CVE-2025-4797 9.8 CriticalJune 3, 2025
• uxper civi, civi - job board & freelance marketplace wordpress theme +1 more Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 - Sensitive Information Exposure CVE-2024-13773 7.3 HighMarch 14, 2025
• uxper civi, civi - job board & freelance marketplace wordpress theme +1 more Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.6.1 - Authentication Bypass CVE-2024-13772 5.6 MediumMarch 14, 2025
• uxper civi, civi - job board & freelance marketplace wordpress theme +1 more Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 - Authentication Bypass via Password Update CVE-2024-13771 9.8 CriticalMarch 14, 2025
• uxper golo, golo - city travel guide wordpress theme +1 more Golo - Directory & Listing, Travel WordPress Theme <= 1.6.10 - Missing Authorization to Privilege Escalation via Unauthenticated Arbitrary User Password Change CVE-2024-12876 9.8 CriticalMarch 7, 2025
• uxper golo An Arbitrary File Upload vulnerability was discovered in the Golo Laravel theme v 1.1.5. CVE-2020-23790 9.8 CriticalMay 12, 2021