CVE-2026-57794

Name of the Vulnerable Software and Affected Versions Golo Framework versions prior to 1.7.4

Description The Golo Framework plugin for WordPress contains a Local File Inclusion flaw. This issue allows authenticated attackers with contributor-level access or higher to include and execute arbitrary files on the server. By exploiting this, an attacker can execute PHP code contained within those files, which may lead to bypassing access controls or obtaining sensitive data, particularly when images or other safe file types can be uploaded and subsequently included.

Recommendations Update Golo Framework to a version newer than 1.7.3.