Privilege Escalation Vulnerability in Golo - City Travel Guide WordPress Theme

CVE-2024-12876

What is CVE-2024-12876?

The Golo - City Travel Guide WordPress Theme contains a security flaw that allows unauthorized users to escalate privileges by exploiting inadequate user identity validation during password updates. This vulnerability affects all versions up to and including 1.6.10, enabling unauthenticated attackers to manipulate user passwords, including those of administrators, thereby gaining unauthorized access to various accounts. Immediate updates and security measures are recommended to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References