G5theme vulnerabilities
34 CVEs and advisories name G5theme as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-32465WordPress Essential Real Estate plugin <= 5.3.3 - PHP Object Injection vulnerability
- CVE-2026-39714WordPress G5Plus April theme <= 6.8 - Broken Access Control vulnerability
- CVE-2026-39668WordPress Book Previewer for Woocommerce plugin <= 1.0.6 - Broken Access Control vulnerability
- CVE-2026-27088WordPress Darna Framework plugin <= 2.9 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2026-27087WordPress Wolverine Framework plugin <= 1.9 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2026-22520WordPress Handmade Framework plugin <= 3.9 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2025-69096WordPress Zorka theme <= 1.5.7 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2026-22521WordPress Handmade Framework plugin <= 3.9 - Local File Inclusion vulnerability
- CVE-2026-0676WordPress Zorka theme <= 1.5.7 - Broken Access Control vulnerability
- CVE-2025-68071WordPress Essential Real Estate plugin <= 5.3.2 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2025-66127WordPress Essential Real Estate plugin <= 5.3.2 - Broken Access Control vulnerability
- CVE-2025-53352WordPress Grid Plus plugin <= 3.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-48126WordPress Essential Real Estate plugin <= 5.2.9 - Local File Inclusion vulnerability
- CVE-2024-13418Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File Upload
- CVE-2024-13420Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Settings Updates
- CVE-2024-13419Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
- CVE-2025-32672WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.9 - Local File Inclusion Vulnerability
- CVE-2025-30849WordPress Essential Real Estate plugin <= 5.2.0 - Local File Inclusion Vulnerability
- CVE-2025-24698WordPress Essential Real Estate plugin <= 5.1.8 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2023-34014WordPress Grid Plus plugin <= 1.3.2 - Broken Access Control vulnerability
- CVE-2024-12329Essential Real Estate <= 5.1.6 - Missing Authorization to Authenticated (Contributor+) Information Exposure
- CVE-2024-10910Grid Plus – Unlimited grid layout <= 1.3.5 - Unauthenticated Arbitrary Shortcode Execution via grid_plus_load_by_category
- CVE-2024-10329Ultimate Bootstrap Elements for Elementor <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure
- CVE-2024-43140WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.4 - Local File Inclusion vulnerability
- CVE-2024-37462WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.2 - Local File Inclusion vulnerability
- CVE-2024-4273Essential Real Estate <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2024-4274Essential Real Estate <= 4.4.2 - Insecure Direct Object Reference to Arbitrary Attachment Deletion
- CVE-2024-2132Ultimate Bootstrap Elements for Elementor <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Widget
- CVE-2024-1398Ultimate Bootstrap Elements for Elementor <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-24797WordPress ERE Recently Viewed Plugin <= 1.3 is vulnerable to PHP Object Injection