Log in Start free

uxper

Products

ProductCVEsExploitedLatest
Golo6–Mar 25, 2026
Nuss5–Jul 13, 2026
Togo5–Nov 6, 2025
Sala4–Dec 31, 2025
Civi - Job Board & Freelance Marketplace WordPress Theme3–Mar 14, 2025
Uxper Booking2–Aug 20, 2025
Civi Framework2–Jul 23, 2026
Golo - City Travel Guide WordPress Theme2–Jun 3, 2025
Golo Framework2–Aug 20, 2026
Sala - Startup & SaaS WordPress Theme1–Jul 9, 2025
Civi1–Jul 23, 2026

Exploited and recent CVEs

  • CVE-2026-28150 High 8.1 WordPress Golo Framework plugin < 1.7.5 - Local File Inclusion vulnerability 0.5%
  • CVE-2026-65525 Medium 5.3 WordPress Civi Framework plugin <= 2.2.0 - Broken Access Control vulnerability 0.3%
  • CVE-2026-65476 Medium 5.3 WordPress Civi theme <= 2.2.4 - Broken Access Control vulnerability 0.3%
  • CVE-2026-57799 High 7.5 WordPress Nuss theme <= 1.3.6 - Local File Inclusion vulnerability 0.5%
  • CVE-2026-57794 High 7.5 WordPress Golo Framework plugin <= 1.7.3 - Local File Inclusion vulnerability 0.5%
  • CVE-2026-27051 Critical 9.8 WordPress Golo theme <= 1.7.0 - Privilege Escalation vulnerability 0.3%
  • CVE-2026-23973 High 7.1 WordPress Golo theme < 1.7.5 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-23975 High 7.5 WordPress Golo theme < 1.7.5 - Local File Inclusion vulnerability 0.5%
  • CVE-2026-23974 Medium 5.3 WordPress Golo theme < 1.7.5 - Broken Access Control vulnerability 0.2%
  • CVE-2025-52739 High 7.1 WordPress Sala theme <= 1.1.3 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-62037 Medium 6.5 WordPress Togo theme < 1.0.4 - Broken Access Control vulnerability 0.3%
  • CVE-2025-62036 High 7.1 WordPress Togo theme < 1.0.4 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-62035 High 8.8 WordPress Togo theme < 1.0.4 - PHP Object Injection vulnerability 0.4%
  • CVE-2025-62034 High 8.8 WordPress Togo theme < 1.0.4 - Privilege Escalation vulnerability 0.4%
  • CVE-2025-62033 Medium 6.5 WordPress Togo theme < 1.0.4 - Broken Access Control vulnerability 0.3%
  • CVE-2025-54709 High 8.1 WordPress Sala Theme <= 1.1.6 - Local File Inclusion Vulnerability 0.6%
  • CVE-2025-54725 Critical 9.8 WordPress Golo Theme <= 1.7.0 - Broken Authentication Vulnerability 0.4%
  • CVE-2025-54724 High 7.1 WordPress Golo Theme <= 1.7.1 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-49891 High 8.5 WordPress Uxper Booking Plugin <= 1.3.3 - SQL Injection Vulnerability 0.3%
  • CVE-2025-49892 High 8.1 WordPress Uxper Booking Plugin <= 1.3.3 - Local File Inclusion Vulnerability 0.8%
  • CVE-2025-49893 High 7.1 WordPress Nuss Theme <= 1.3.3 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-49894 High 8.1 WordPress Nuss Theme <= 1.3.3 - Local File Inclusion Vulnerability 0.9%
  • CVE-2025-52803 High 7.5 WordPress Sala theme <= 1.1.3 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-52804 High 7.5 WordPress Nuss theme <= 1.3.7.1 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-4606 Critical 9.8 Sala - Startup & SaaS WordPress Theme <= 1.1.4 - Unauthenticated Privilege Escalation via Password Reset/Account Takeover 0.7%
  • CVE-2025-52826 High 8.8 WordPress Sala theme <= 1.1.3 - PHP Object Injection Vulnerability 0.4%
  • CVE-2025-52827 High 8.8 WordPress Nuss theme <= 1.3.3 - PHP Object Injection Vulnerability 0.4%
  • CVE-2025-49511 High 7.1 WordPress Civi Framework plugin <= 2.1.6 - Cross Site Request Forgery (CSRF) to User Deactivation vulnerability 0.2%
  • CVE-2025-4797 Critical 9.8 Golo <= 1.7.0 - Authentication Bypass to Account Takeover 0.5%
  • CVE-2024-13773 High 7.3 Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 - Sensitive Information Exposure 0.3%