Privilege Escalation Vulnerability in Golo - City Travel Guide WordPress Theme

CVE-2024-12876

What is CVE-2024-12876?

The Golo - City Travel Guide WordPress Theme contains a security flaw that allows unauthorized users to escalate privileges by exploiting inadequate user identity validation during password updates. This vulnerability affects all versions up to and including 1.6.10, enabling unauthenticated attackers to manipulate user passwords, including those of administrators, thereby gaining unauthorized access to various accounts. Immediate updates and security measures are recommended to mitigate this risk.

References