Uxper vulnerabilities
33 CVEs and advisories name Uxper as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-28150WordPress Golo Framework plugin < 1.7.5 - Local File Inclusion vulnerability
- CVE-2026-65525WordPress Civi Framework plugin <= 2.2.0 - Broken Access Control vulnerability
- CVE-2026-65476WordPress Civi theme <= 2.2.4 - Broken Access Control vulnerability
- CVE-2026-57799WordPress Nuss theme <= 1.3.6 - Local File Inclusion vulnerability
- CVE-2026-57794WordPress Golo Framework plugin <= 1.7.3 - Local File Inclusion vulnerability
- CVE-2026-27051WordPress Golo theme <= 1.7.0 - Privilege Escalation vulnerability
- CVE-2026-23973WordPress Golo theme < 1.7.5 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2026-23975WordPress Golo theme < 1.7.5 - Local File Inclusion vulnerability
- CVE-2026-23974WordPress Golo theme < 1.7.5 - Broken Access Control vulnerability
- CVE-2025-52739WordPress Sala theme <= 1.1.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-62037WordPress Togo theme < 1.0.4 - Broken Access Control vulnerability
- CVE-2025-62036WordPress Togo theme < 1.0.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-62035WordPress Togo theme < 1.0.4 - PHP Object Injection vulnerability
- CVE-2025-62034WordPress Togo theme < 1.0.4 - Privilege Escalation vulnerability
- CVE-2025-62033WordPress Togo theme < 1.0.4 - Broken Access Control vulnerability
- CVE-2025-54709WordPress Sala Theme <= 1.1.6 - Local File Inclusion Vulnerability
- CVE-2025-54725WordPress Golo Theme <= 1.7.0 - Broken Authentication Vulnerability
- CVE-2025-54724WordPress Golo Theme <= 1.7.1 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-49891WordPress Uxper Booking Plugin <= 1.3.3 - SQL Injection Vulnerability
- CVE-2025-49892WordPress Uxper Booking Plugin <= 1.3.3 - Local File Inclusion Vulnerability
- CVE-2025-49893WordPress Nuss Theme <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-49894WordPress Nuss Theme <= 1.3.3 - Local File Inclusion Vulnerability
- CVE-2025-52803WordPress Sala theme <= 1.1.3 - Broken Access Control Vulnerability
- CVE-2025-52804WordPress Nuss theme <= 1.3.7.1 - Broken Access Control Vulnerability
- CVE-2025-4606Sala - Startup & SaaS WordPress Theme <= 1.1.4 - Unauthenticated Privilege Escalation via Password Reset/Account Takeover
- CVE-2025-52826WordPress Sala theme <= 1.1.3 - PHP Object Injection Vulnerability
- CVE-2025-52827WordPress Nuss theme <= 1.3.3 - PHP Object Injection Vulnerability
- CVE-2025-49511WordPress Civi Framework plugin <= 2.1.6 - Cross Site Request Forgery (CSRF) to User Deactivation vulnerability
- CVE-2025-4797Golo <= 1.7.0 - Authentication Bypass to Account Takeover
- CVE-2024-13773Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 - Sensitive Information Exposure