Cross-Site Scripting
3 records37.5%First: 2020. Latest: 2026.
Theme security history
Golo - City Travel Guide WordPress Theme Vulnerability History & Security Timeline
The Wordfence Intelligence dataset currently contains 8 vulnerability records associated with Golo - City Travel Guide WordPress Theme, published between 2020 and 2026.
Dataset last synchronized: 2026-08-03 00:31:25 UTC
At a glance
Security Snapshot
8Total records
3Critical
2High
3Medium
0Low
0Informational
7Patched records
1Currently marked unpatched
2020-07-11First disclosure
2026-03-23Latest disclosure
7 of 8CVE coverage
Year-by-Year Timeline
| Year | Records | Relative volume |
|---|---|---|
| 2020 | 1 | |
| 2025 | 3 | |
| 2026 | 4 |
Severity Breakdown
| Severity | Records | Share |
|---|---|---|
| Critical | 3 | 37.5% |
| High | 2 | 25% |
| Medium | 3 | 37.5% |
Vulnerability-Type Breakdown
Missing Authorization
2 records25%First: 2025. Latest: 2026.
Authentication Bypass
1 record12.5%First: 2025. Latest: 2025.
Other
1 record12.5%First: 2026. Latest: 2026.
Privilege Escalation
1 record12.5%First: 2026. Latest: 2026.
Patch Status
- Patched
- 7
- Currently marked unpatched
- 1
- Unknown status
- 0
Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.
Latest Known Patched Versions
1.7.51.7.21.7.11.6.111.3.3
Affected-Version History
Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.
| Affected range | Vulnerability | Published | Patched version | Severity |
|---|---|---|---|---|
[*, 1.7.5) | Golo - City Travel Guide WordPress Theme < 1.7.5 - Reflected Cross-Site Scripting | March 23, 2026 | 1.7.5 | Medium |
*-1.7.0 | Golo - City Travel Guide WordPress Theme <= 1.7.0 - Unauthenticated Privilege Escalation | March 12, 2026 | Not supplied | Critical |
[*, 1.7.5) | Golo < 1.7.5 - Missing Authorization | February 5, 2026 | 1.7.5 | Medium |
[*, 1.7.5) | Golo < 1.7.5 - Authenticated (Contributor+) Local File Inclusion | February 5, 2026 | 1.7.5 | High |
*-1.7.1 | Golo <= 1.7.1 - Reflected Cross-Site Scripting | August 26, 2025 | 1.7.2 | Medium |
*-1.7.0 | Golo <= 1.7.0 - Authentication Bypass to Account Takeover | June 2, 2025 | 1.7.1 | Critical |
*-1.6.10 | Golo - Directory & Listing, Travel WordPress Theme <= 1.6.10 - Missing Authorization to Privilege Escalation via Unauthenticated Arbitrary User Password Change | March 6, 2025 | 1.6.11 | Critical |
[*, 1.3.3) | Golo - City Travel Guide WordPress Theme < 1.3.3 - Reflected Cross-Site Scripting | July 11, 2020 | 1.3.3 | High |
Selected source records
Latest Records
MediumCVE-2026-23973
Golo - City Travel Guide WordPress Theme < 1.7.5 - Reflected Cross-Site Scripting
Published: March 23, 2026
- Affected versions
- [*, 1.7.5)
- Patched versions
- 1.7.5
CriticalCVE-2026-27051
Golo - City Travel Guide WordPress Theme <= 1.7.0 - Unauthenticated Privilege Escalation
Published: March 12, 2026
- Affected versions
- *-1.7.0
- Patched versions
- Not supplied
HighCVE-2026-23975
Golo < 1.7.5 - Authenticated (Contributor+) Local File Inclusion
Published: February 5, 2026
- Affected versions
- [*, 1.7.5)
- Patched versions
- 1.7.5
MediumCVE-2026-23974
Golo < 1.7.5 - Missing Authorization
Published: February 5, 2026
- Affected versions
- [*, 1.7.5)
- Patched versions
- 1.7.5
MediumCVE-2025-54724
Golo <= 1.7.1 - Reflected Cross-Site Scripting
Published: August 26, 2025
- Affected versions
- *-1.7.1
- Patched versions
- 1.7.2
CriticalCVE-2025-4797
Golo <= 1.7.0 - Authentication Bypass to Account Takeover
Published: June 2, 2025
- Affected versions
- *-1.7.0
- Patched versions
- 1.7.1
CriticalCVE-2024-12876
Golo - Directory & Listing, Travel WordPress Theme <= 1.6.10 - Missing Authorization to Privilege Escalation via Unauthenticated Arbitrary User Password Change
Published: March 6, 2025
- Affected versions
- *-1.6.10
- Patched versions
- 1.6.11
High
Golo - City Travel Guide WordPress Theme < 1.3.3 - Reflected Cross-Site Scripting
Published: July 11, 2020
- Affected versions
- [*, 1.3.3)
- Patched versions
- 1.3.3
Highest-Severity Records
CriticalCVE-2026-27051
Golo - City Travel Guide WordPress Theme <= 1.7.0 - Unauthenticated Privilege Escalation
Published: March 12, 2026
- Affected versions
- *-1.7.0
- Patched versions
- Not supplied
CriticalCVE-2024-12876
Golo - Directory & Listing, Travel WordPress Theme <= 1.6.10 - Missing Authorization to Privilege Escalation via Unauthenticated Arbitrary User Password Change
Published: March 6, 2025
- Affected versions
- *-1.6.10
- Patched versions
- 1.6.11
CriticalCVE-2025-4797
Golo <= 1.7.0 - Authentication Bypass to Account Takeover
Published: June 2, 2025
- Affected versions
- *-1.7.0
- Patched versions
- 1.7.1
HighCVE-2026-23975
Golo < 1.7.5 - Authenticated (Contributor+) Local File Inclusion
Published: February 5, 2026
- Affected versions
- [*, 1.7.5)
- Patched versions
- 1.7.5
High
Golo - City Travel Guide WordPress Theme < 1.3.3 - Reflected Cross-Site Scripting
Published: July 11, 2020
- Affected versions
- [*, 1.3.3)
- Patched versions
- 1.3.3
MediumCVE-2025-54724
Golo <= 1.7.1 - Reflected Cross-Site Scripting
Published: August 26, 2025
- Affected versions
- *-1.7.1
- Patched versions
- 1.7.2
MediumCVE-2026-23973
Golo - City Travel Guide WordPress Theme < 1.7.5 - Reflected Cross-Site Scripting
Published: March 23, 2026
- Affected versions
- [*, 1.7.5)
- Patched versions
- 1.7.5
MediumCVE-2026-23974
Golo < 1.7.5 - Missing Authorization
Published: February 5, 2026
- Affected versions
- [*, 1.7.5)
- Patched versions
- 1.7.5
Currently Marked Unpatched Records
CriticalCVE-2026-27051
Golo - City Travel Guide WordPress Theme <= 1.7.0 - Unauthenticated Privilege Escalation
Published: March 12, 2026
- Affected versions
- *-1.7.0
- Patched versions
- Not supplied
Need help reviewing an exposed WordPress website?
Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.
Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.
Data Source, Attribution and Methodology
This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.