WordPress Golo Framework Plugin Local File Inclusion Vulnerability

Vulnerability Overview Vulnerability Name: Local File Inclusion Vulnerability in WordPress Golo Framework Plugin <= 1.7.3 Priority: Low CVSS Score: 7.5 Vulnerability Type: Local File Inclusion (LFI) Scope of Impact Affected Versions: <= 1.7.3 Software Type: WordPress Plugin Potential Risk: An attacker can exploit this vulnerability to include local files from the target website and display their output on the screen. Files containing credentials (such as database credentials) may be read completely, potentially leading to database takeover, depending on the configuration. Remediation Current Status: No official patch available Recommended Actions: Immediately update the affected plugin. If an update is not possible, contact your hosting provider or web developer for assistance. Detailed Information Software: Golo Framework Type: Plugin Affected Versions: <= 1.7.3 Disclosure Date: January 7, 2026 Reporter: João Pedro S Alcântara (Kinorth) Additional Information Risk Description: This type of vulnerability is frequently used in large-scale attack campaigns. Regardless of website traffic size or popularity, attackers can leverage these vulnerabilities to compromise thousands of sites. Solution: This security issue has a low severity impact and is unlikely to be exploited. Timeline Disclosure Date: January 7, 2026 Subscription Content: Weekly WordPress Security Intelligence How to Subscribe: Enter your email address and click the "Subscribe" button Footer Information Links: Pricing, Case Studies, Login, Start Free Trial, etc. Resources: Vulnerability Mitigation, Code Security, Bug Bounty, Use Cases, Resources, Patchstack, etc. Summary This is a Local File Inclusion vulnerability in the WordPress Golo Framework Plugin versions <= 1.7.3. While the priority is low, there are potential risks. It is recommended to update the plugin immediately or contact relevant support staff. No official patch is currently available.

Goal Reached Thanks to every supporter — we hit 100%!

WordPress Golo Framework Plugin Local File Inclusion Vulnerability