uxper Golo Theme Authentication Bypass Vulnerability

A vulnerability allowing authentication bypass has been identified in the uxper Golo WordPress theme, affecting versions through 1.7.0. This issue allows unauthorized users to bypass authentication mechanisms, potentially leading to actions that should be restricted to users with higher privileges.

Impact

Exploitation of this vulnerability could allow unauthorized users to gain access to functionalities or areas of the website reserved for higher privileged users, such as administrative rights.

Remediation

Users are advised to update the uxper Golo WordPress theme to version 1.7.1 or later. Patchstack has also issued a virtual patch to block attacks targeting this vulnerability.