CVE-2020-23790

CVE-2020-23790 affects the Golo Laravel theme v1.1.5. The vulnerability is described as an Arbitrary File Upload, with CVSS v3.1 base score 9.8 (CRITICAL) and CVSS v2 base score 7.5 (HIGH). Exploitation details are not provided in the connected documents; references indicate public listings but d...

CVE-2024-12876

CVE-2024-12876 affects the Golo – City Travel Guide WordPress Theme (WordPress theme). The issue is privilege escalation via account takeover: an unauthenticated attacker can change arbitrary user passwords (including administrators) due to improper validation of user identity before password upd...