uxper records
5 published records for vendor uxper.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-288 Authentication Bypass Using an Alternate Path or Channel2
- CWE-321 Use of Hard-coded Cryptographic Key1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-862 Missing Authorization1
The weakness classes this vendor ships most often: where to look.
CWEAll records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2020-23790No exploit | An Arbitrary File Upload vulnerability was discovered in the Golo Laravel theme v 1.1.5.uxper · golo · CWE-434 | Critical9.8 | — | 1.5% | May 12, 2021 |
39Monitor | CVE-2024-12876No exploit | Golo - Directory & Listing, Travel WordPress Theme <= 1.6.10 - Missing Authorization to Privilege Escalation via Unauthenticated Arbitrary User Password Changeuxper · golo · CWE-862 | Critical9.8 | — | 0.5% | Mar 7, 2025 |
30Monitor | CVE-2024-13773No exploit | Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 - Sensitive Information Exposureuxper · civi · CWE-321 | High7.5 | — | 0.3% | Mar 14, 2025 |
23Monitor | CVE-2024-13771No exploit | Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 - Authentication Bypass via Password Updateuxper · civi · CWE-288 | Medium5.9 | — | 0.4% | Mar 14, 2025 |
23Monitor | CVE-2024-13772No exploit | Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.6.1 - Authentication Bypassuxper · civi · CWE-288 | Medium5.9 | — | 0.3% | Mar 14, 2025 |
- CVE-2020-2379039Monitor
An Arbitrary File Upload vulnerability was discovered in the Golo Laravel theme v 1.1.5.
CriticalCVSS 9.8No exploitEPSS 2%uxper · goloMay 12, 2021
- CVE-2024-1287639Monitor
Golo - Directory & Listing, Travel WordPress Theme <= 1.6.10 - Missing Authorization to Privilege Escalation via Unauthenticated Arbitrary User Password Change
CriticalCVSS 9.8No exploitEPSS 0%uxper · goloMar 7, 2025
- CVE-2024-1377330Monitor
Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 - Sensitive Information Exposure
HighCVSS 7.5No exploitEPSS 0%uxper · civiMar 14, 2025
- CVE-2024-1377123Monitor
Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 - Authentication Bypass via Password Update
MediumCVSS 5.9No exploitEPSS 0%uxper · civiMar 14, 2025
- CVE-2024-1377223Monitor
Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.6.1 - Authentication Bypass
MediumCVSS 5.9No exploitEPSS 0%uxper · civiMar 14, 2025