PT-2025-35073 · Unknown · Uxper Golo

Aiden · CVE-2025-54725 · Published 2025-08-28 · Updated 2025-08-28

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions uxper Golo versions through 1.7.0

Description An Authentication Bypass Using an Alternate Path or Channel vulnerability exists in uxper Golo, allowing Authentication Abuse.

Recommendations Update uxper Golo to a version later than 1.7.0.

Fix

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2025-54725

Affected Products

Uxper Golo

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-54725 · Security Note
• https://twitter.com/CveFindCom/status/1961053828762964334 · Twitter Post
• https://patchstack.com/database/Wordpress/Theme/golo/vulnerability/wordpress-golo-theme-1-7-0-broken-authentication-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/wordpress/theme/golo/vulnerability/wordpress-golo-theme-1-7-0-broken-authentication-vulnerability?_s_id=cve · Note
• https://twitter.com/VulmonFeeds/status/1961090580278128768 · Twitter Post
• https://t.me/CVEtracker/31114 · Telegram Post
• https://twitter.com/CVEnew/status/1961052776483479758 · Twitter Post