G5theme vulnerabilities

Products

• Essential Real Estate 20
• Ultimate Bootstrap Elements For Elementor 6
• Grid Plus – Unlimited Grid Layout 4
• April Framework 3
• Auteur Framework 3
• Benaa Framework 3
• Beyot Framework 3
• Essential Real Estate 2
• Grid Plus 2
• Grid Plus 2
• Handmade Framework 2
• Ultimate Bootstrap Elements For Elementor 2
• Zorka 2

Newest

• g5theme essential real estate Essential Real Estate < 5.3.5 - Customer+ Invoice PII Disclosure via IDOR CVE-2026-90967 No scoreNovember 5, 2026
• g5theme essential real estate Essential Real Estate < 5.3.5 - Customer+ Arbitrary Paid Package Activation and Forged Paid Invoice via ere_free_package_ajax CVE-2026-90966 No scoreNovember 5, 2026
• g5theme essential real estate Essential Real Estate < 5.3.5 - Unauthenticated Unpublished Listing Image Disclosure CVE-2026-90965 No scoreNovember 5, 2026
• g5theme essential real estate Essential Real Estate < 5.3.5 - Unauthenticated Arbitrary Email Sending CVE-2026-90964 No scoreNovember 5, 2026
• g5theme essential real estate Essential Real Estate < 5.3.5 - Unauthenticated Unpublished Property Listing and Agent Contact Disclosure via property_print_ajax CVE-2026-90963 No scoreNovember 5, 2026
• g5theme essential real estate Essential Real Estate 4.4.3 - 5.3.4 - Subscriber+ Arbitrary Media Attachment Deletion via IDOR CVE-2026-110964 6.5 MediumNovember 4, 2026
• g5theme essential real estate WordPress Essential Real Estate plugin <= 5.3.3 - PHP Object Injection vulnerability CVE-2026-32465 8.8 HighAugust 18, 2026
• g5theme g5plus april WordPress G5Plus April theme <= 6.8 - Broken Access Control vulnerability CVE-2026-39714 5.3 MediumApril 8, 2026
• g5theme book previewer for woocommerce WordPress Book Previewer for Woocommerce plugin <= 1.0.6 - Broken Access Control vulnerability CVE-2026-39668 5.3 MediumApril 8, 2026
• g5theme darna framework WordPress Darna Framework plugin <= 2.9 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-27088 7.1 HighMarch 25, 2026
• g5theme wolverine framework WordPress Wolverine Framework plugin <= 1.9 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-27087 7.1 HighMarch 25, 2026
• g5theme handmade framework WordPress Handmade Framework plugin <= 3.9 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-22520 7.1 HighMarch 25, 2026
• g5theme zorka WordPress Zorka theme <= 1.5.7 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-69096 7.1 HighMarch 25, 2026
• g5theme handmade framework WordPress Handmade Framework plugin <= 3.9 - Local File Inclusion vulnerability CVE-2026-22521 7.5 HighJanuary 8, 2026
• g5theme zorka WordPress Zorka theme <= 1.5.7 - Broken Access Control vulnerability CVE-2026-0676 5.3 MediumJanuary 8, 2026
• g5theme essential real estate WordPress Essential Real Estate plugin <= 5.3.2 - Insecure Direct Object References (IDOR) vulnerability CVE-2025-68071 6.5 MediumDecember 16, 2025
• g5theme essential real estate WordPress Essential Real Estate plugin <= 5.3.2 - Broken Access Control vulnerability CVE-2025-66127 5.3 MediumDecember 16, 2025
• g5theme grid plus WordPress Grid Plus plugin <= 3.3 - Cross Site Scripting (XSS) vulnerability CVE-2025-53352 7.1 HighOctober 22, 2025
• g5plus essential real estate WordPress Essential Real Estate plugin <= 5.2.9 - Local File Inclusion vulnerability CVE-2025-48126 8.1 HighJune 9, 2025
• g5plus april, auteur, benaa +5 more +7 more Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File Upload CVE-2024-13418 8.8 HighMay 2, 2025
• g5plus april, auteur, benaa +5 more +7 more Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Settings Updates CVE-2024-13420 4.3 MediumMay 2, 2025
• g5plus april, auteur, benaa +5 more +7 more Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2024-13419 6.4 MediumMay 2, 2025
• g5theme ultimate bootstrap elements for elementor WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.9 - Local File Inclusion Vulnerability CVE-2025-32672 8.1 HighApril 11, 2025
• g5plus essential real estate WordPress Essential Real Estate plugin <= 5.2.0 - Local File Inclusion Vulnerability CVE-2025-30849 8.1 HighApril 1, 2025
• g5plus essential real estate WordPress Essential Real Estate plugin <= 5.1.8 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-24698 4.3 MediumJanuary 24, 2025
• g5theme grid plus WordPress Grid Plus plugin <= 1.3.2 - Broken Access Control vulnerability CVE-2023-34014 5.4 MediumDecember 13, 2024
• g5plus essential real estate Essential Real Estate <= 5.1.6 - Missing Authorization to Authenticated (Contributor+) Information Exposure CVE-2024-12329 4.3 MediumDecember 12, 2024
• g5theme grid plus – unlimited grid layout Grid Plus – Unlimited grid layout <= 1.3.5 - Unauthenticated Arbitrary Shortcode Execution via grid_plus_load_by_category CVE-2024-10910 7.3 HighDecember 12, 2024
• g5plus ultimate bootstrap elements for elementor Ultimate Bootstrap Elements for Elementor <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure CVE-2024-10329 4.3 MediumNovember 5, 2024
• g5plus ultimate bootstrap elements for elementor WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.4 - Local File Inclusion vulnerability CVE-2024-43140 7.5 HighAugust 13, 2024
• g5plus ultimate bootstrap elements for elementor WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.2 - Local File Inclusion vulnerability CVE-2024-37462 8.5 HighJuly 9, 2024
• g5plus essential real estate Essential Real Estate <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-4273 6.4 MediumJune 4, 2024
• g5plus essential real estate Essential Real Estate <= 4.4.2 - Insecure Direct Object Reference to Arbitrary Attachment Deletion CVE-2024-4274 4.3 MediumJune 4, 2024
• g5plus ultimate bootstrap elements for elementor Ultimate Bootstrap Elements for Elementor <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Widget CVE-2024-2132 6.4 MediumApril 6, 2024
• g5plus ultimate bootstrap elements for elementor Ultimate Bootstrap Elements for Elementor <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1398 6.4 MediumMarch 2, 2024
• g5plus ere recently viewed, g5theme ere recently viewed – essential real estate add-on, essential real estate +2 more WordPress ERE Recently Viewed Plugin <= 1.3 is vulnerable to PHP Object Injection CVE-2024-24797 9.8 CriticalFebruary 12, 2024
• g5plus essential real estate Essential Real Estate < 4.4 - Subscriber+ Arbitrary File Upload CVE-2023-6140 8.8 HighJanuary 8, 2024
• g5plus essential real estate Essential Real Estate < 4.4.0 - Subscriber+ Stored XSS CVE-2023-6141 5.4 MediumJanuary 8, 2024
• g5plus essential real estate Essential Real Estate < 4.4.0 - Subscriber+ Denial of Service via Arbitrary Option Update CVE-2023-6139 6.5 MediumJanuary 8, 2024
• g5plus essential real estate Essential Real Estate <= 4.3.5 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2023-6827 7.5 HighDecember 15, 2023
• g5theme grid plus, grid plus – unlimited grid layout +1 more Grid Plus <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Grid Layout Add/Update/Delete CVE-2023-5251 5.4 MediumOctober 30, 2023
• g5theme grid plus, grid plus – unlimited grid layout +1 more Grid Plus <= 1.3.3 - Authenticated (Subscriber+) Local File Inclusion via Shortcode CVE-2023-5250 8.8 HighOctober 30, 2023
• g5theme grid plus – unlimited grid layout, grid-plus +1 more WordPress Grid Plus Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS) CVE-2023-46209 7.1 HighOctober 27, 2023
• g5theme essential real estate Essential Real Estate < 3.9.6 - Reflected Cross-Site-Scripting CVE-2022-3933 5.4 MediumDecember 12, 2022