Golo - City Travel Guide WordPress Theme

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Themes   >   Golo - City Travel Guide WordPress Theme

Information

Software Type Theme
Software Slug golo
Software Status Active
Software Author uxper
Software Website themeforest.net
Software Active Installs 2,092
Software Record Last Updated January 27, 2025

8 Vulnerabilities

Submit a Vulnerability
Golo - City Travel Guide WordPress Theme < 1.7.5 - Reflected Cross-Site Scripting
6.1
CVE-2026-23973
Mar 23, 2026
Researcher: João Pedro Soares de Alcântara
Golo - City Travel Guide WordPress Theme <= 1.7.0 - Unauthenticated Privilege Escalation
9.8
CVE-2026-27051
Mar 12, 2026
Researcher: Tran Nguyen Bao Khanh
Golo < 1.7.5 - Missing Authorization
5.3
CVE-2026-23974
Feb 5, 2026
Researcher: João Pedro Soares de Alcântara
Golo < 1.7.5 - Authenticated (Contributor+) Local File Inclusion
7.5
CVE-2026-23975
Feb 5, 2026
Researcher: João Pedro Soares de Alcântara
Golo <= 1.7.1 - Reflected Cross-Site Scripting
6.1
CVE-2025-54724
Aug 26, 2025
Researcher: Bonds
Golo <= 1.7.0 - Authentication Bypass to Account Takeover
9.8
CVE-2025-4797
Jun 2, 2025
Researcher: Foxyyy
Golo - Directory & Listing, Travel WordPress Theme <= 1.6.10 - Missing Authorization to Privilege Escalation via Unauthenticated Arbitrary User Password Change
9.8
CVE-2024-12876
Mar 6, 2025
Researcher: Lucio Sá
Golo - City Travel Guide WordPress Theme < 1.3.3 - Reflected Cross-Site Scripting
7.1
CVE ID Unknown
Jul 11, 2020
Researcher: R3N0
Title Status CVE ID CVSS Researchers Date
Golo - City Travel Guide WordPress Theme < 1.7.5 - Reflected Cross-Site Scripting Patched CVE-2026-23973 6.1 João Pedro Soares de Alcântara March 23, 2026
Golo - City Travel Guide WordPress Theme <= 1.7.0 - Unauthenticated Privilege Escalation Unpatched CVE-2026-27051 9.8 Tran Nguyen Bao Khanh March 12, 2026
Golo < 1.7.5 - Missing Authorization Patched CVE-2026-23974 5.3 João Pedro Soares de Alcântara February 5, 2026
Golo < 1.7.5 - Authenticated (Contributor+) Local File Inclusion Patched CVE-2026-23975 7.5 João Pedro Soares de Alcântara February 5, 2026
Golo <= 1.7.1 - Reflected Cross-Site Scripting Patched CVE-2025-54724 6.1 Bonds August 26, 2025
Golo <= 1.7.0 - Authentication Bypass to Account Takeover Patched CVE-2025-4797 9.8 Foxyyy June 2, 2025
Golo - Directory & Listing, Travel WordPress Theme <= 1.6.10 - Missing Authorization to Privilege Escalation via Unauthenticated Arbitrary User Password Change Patched CVE-2024-12876 9.8 Lucio Sá March 6, 2025
Golo - City Travel Guide WordPress Theme < 1.3.3 - Reflected Cross-Site Scripting Patched 7.1 R3N0 July 11, 2020

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation