Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

34 records

Vendor: uxper Clear all filters
TI-2026-41621 CVE-2026-57799 · GHSA-9c43-4m2w-p54m

WordPress Nuss theme <= 1.3.6 - Local File Inclusion vulnerability

Priority LOW 33

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Nuss nuss allows PHP Local File Inclusion.This issue affects Nuss: from n/a through <= 1.3.6.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00511 Published 2026-07-13 No fix listed CWE-98
TI-2026-41616 CVE-2026-57794 · GHSA-m5qx-p3rw-r4vh

WordPress Golo Framework plugin <= 1.7.3 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Golo Framework golo-framework allows PHP Local File Inclusion.This issue affects Golo Framewo…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00511 Published 2026-07-13 No fix listed CWE-98
TI-2026-21514 CVE-2026-27051 · GHSA-gcfq-p9h5-pjmx

WordPress Golo theme <= 1.7.0 - Privilege Escalation vulnerability

Priority MEDIUM 49

Incorrect Privilege Assignment vulnerability in uxper Golo golo allows Privilege Escalation.This issue affects Golo: from n/a through <= 1.7.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00334 Published 2026-03-25 No fix listed CWE-266
TI-2026-19317 CVE-2026-23975 · GHSA-pvjj-w6vm-wx5v

WordPress Golo theme < 1.7.5 - Local File Inclusion vulnerability

Priority MEDIUM 41

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Golo golo allows PHP Local File Inclusion.This issue affects Golo: from n/a through < 1.7.5.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00462 Published 2026-01-22 No fix listed CWE-98
TI-2026-19316 CVE-2026-23974 · GHSA-64f6-hj79-prp4

WordPress Golo theme < 1.7.5 - Broken Access Control vulnerability

Priority LOW 26

Missing Authorization vulnerability in uxper Golo golo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Golo: from n/a through < 1.7.5.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00247 Published 2026-01-22 No fix listed CWE-862
TI-2025-32789 CVE-2025-52739 · GHSA-5hgp-464p-8qh3

WordPress Sala theme <= 1.1.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uxper Sala allows Reflected XSS.This issue affects Sala: from n/a through 1.1.3.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00178 Published 2025-12-31 No fix listed CWE-79
TI-2025-38359 CVE-2025-62036 · GHSA-5cxr-c9xc-g5r5

WordPress Togo theme < 1.0.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00228 Published 2025-11-06 No fix listed CWE-79
TI-2025-34488 CVE-2025-54725 · GHSA-f95r-5fvr-2468

WordPress Golo Theme <= 1.7.0 - Broken Authentication Vulnerability

Priority MEDIUM 49

Authentication Bypass Using an Alternate Path or Channel vulnerability in uxper Golo golo allows Authentication Abuse.This issue affects Golo: from n/a through <= 1.7.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00422 Published 2025-08-28 No fix listed CWE-288
TI-2025-34487 CVE-2025-54724 · GHSA-mgqr-hcjj-87c5

WordPress Golo Theme <= 1.7.1 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uxper Golo golo allows Reflected XSS.This issue affects Golo: from n/a through <= 1.7.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00185 Published 2025-08-28 No fix listed CWE-79
TI-2025-31806 CVE-2025-49891 · GHSA-395h-2723-vv9w

WordPress Uxper Booking Plugin <= 1.3.3 - SQL Injection Vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in uxper Uxper Booking uxper-booking allows Blind SQL Injection.This issue affects Uxper Booking: from n/a through <= 1.3…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00339 Published 2025-08-20 No fix listed CWE-89
TI-2025-31807 CVE-2025-49892 · GHSA-63hx-wjr2-3wgg

WordPress Uxper Booking Plugin <= 1.3.3 - Local File Inclusion Vulnerability

Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Uxper Booking uxper-booking allows PHP Local File Inclusion.This issue affects Uxper Booking:…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00836 Published 2025-08-20 No fix listed CWE-98
TI-2025-31808 CVE-2025-49893 · GHSA-vcj7-22h6-j5wf

WordPress Nuss Theme <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uxper Nuss nuss allows Reflected XSS.This issue affects Nuss: from n/a through <= 1.3.3.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00342 Published 2025-08-20 No fix listed CWE-79
TI-2025-31809 CVE-2025-49894 · GHSA-24pw-h6w3-6pgm

WordPress Nuss Theme <= 1.3.3 - Local File Inclusion Vulnerability

Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in uxper Nuss nuss allows PHP Local File Inclusion.This issue affects Nuss: from n/a through <= 1.3.3.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00934 Published 2025-08-20 No fix listed CWE-98
TI-2025-32854 CVE-2025-52804 · GHSA-hfqj-4687-q3w5

WordPress Nuss theme <= 1.3.7.1 - Broken Access Control Vulnerability

Priority LOW 39

Missing Authorization vulnerability in uxper Nuss nuss allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Nuss: from n/a through <= 1.3.7.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00301 Published 2025-07-16 No fix listed CWE-862
Load more