PT-2026-4245 · Unknown · Uxper Golo

Published 2026-01-22 · Updated 2026-01-22 · CVE-2026-23974

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions uxper Golo versions prior to 1.7.5

Description An authorization issue exists in uxper Golo, allowing exploitation due to incorrectly configured access control security levels.

Recommendations Update uxper Golo to version 1.7.5 or later.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-23974

Affected Products

Uxper Golo

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-23974 · Security Note
• https://twitter.com/CVEnew/status/2014383034439500240 · Twitter Post
• https://patchstack.com/database/Wordpress/Theme/golo/vulnerability/wordpress-golo-theme-1-7-5-broken-access-control-vulnerability?_s_id=cve · Note