Skip to contentG5theme Essential Real Estate vulnerabilities
- g5theme essential real estateEssential Real Estate 5.3.5 - Customer+ Email Relay Allowlist PoisoningCVE-2026-1236704.3 Medium
- g5theme essential real estateEssential Real Estate < 5.3.5 - Customer+ Invoice PII Disclosure via IDORCVE-2026-909674.3 Medium
- g5theme essential real estateEssential Real Estate < 5.3.5 - Customer+ Arbitrary Paid Package Activation and Forged Paid Invoice via ere_free_package_ajaxCVE-2026-909664.3 Medium
- g5theme essential real estateEssential Real Estate < 5.3.5 - Unauthenticated Unpublished Listing Image DisclosureCVE-2026-909655.3 Medium
- g5theme essential real estateEssential Real Estate < 5.3.5 - Unauthenticated Arbitrary Email SendingCVE-2026-909645.3 Medium
- g5theme essential real estateEssential Real Estate < 5.3.5 - Unauthenticated Unpublished Property Listing and Agent Contact Disclosure via property_print_ajaxCVE-2026-909635.3 Medium
- g5theme essential real estateEssential Real Estate 4.4.3 - 5.3.4 - Subscriber+ Arbitrary Media Attachment Deletion via IDORCVE-2026-1109646.5 Medium
- g5theme essential real estateWordPress Essential Real Estate plugin <= 5.3.3 - PHP Object Injection vulnerabilityCVE-2026-324658.8 High
- g5theme essential real estateWordPress Essential Real Estate plugin <= 5.3.2 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2025-680716.5 Medium
- g5theme essential real estateWordPress Essential Real Estate plugin <= 5.3.2 - Broken Access Control vulnerabilityCVE-2025-661275.3 Medium
- g5plus essential real estateWordPress Essential Real Estate plugin <= 5.2.9 - Local File Inclusion vulnerabilityCVE-2025-481268.1 High
- g5plus essential real estateWordPress Essential Real Estate plugin <= 5.2.0 - Local File Inclusion VulnerabilityCVE-2025-308498.1 High
- g5plus essential real estateWordPress Essential Real Estate plugin <= 5.1.8 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2025-246984.3 Medium
- g5plus essential real estateEssential Real Estate <= 5.1.6 - Missing Authorization to Authenticated (Contributor+) Information ExposureCVE-2024-123294.3 Medium
- g5plus essential real estateEssential Real Estate <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-42736.4 Medium
- g5plus essential real estateEssential Real Estate <= 4.4.2 - Insecure Direct Object Reference to Arbitrary Attachment DeletionCVE-2024-42744.3 Medium
- g5plus ere recently viewed, g5theme ere recently viewed – essential real estate add-on, essential real estate +2 moreWordPress ERE Recently Viewed Plugin <= 1.3 is vulnerable to PHP Object InjectionCVE-2024-247979.8 Critical
- g5plus essential real estateEssential Real Estate < 4.4 - Subscriber+ Arbitrary File UploadCVE-2023-61408.8 High
- g5plus essential real estateEssential Real Estate < 4.4.0 - Subscriber+ Stored XSSCVE-2023-61415.4 Medium
- g5plus essential real estateEssential Real Estate < 4.4.0 - Subscriber+ Denial of Service via Arbitrary Option UpdateCVE-2023-61396.5 Medium
- g5plus essential real estateEssential Real Estate <= 4.3.5 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2023-68277.5 High
- g5theme essential real estateEssential Real Estate < 3.9.6 - Reflected Cross-Site-ScriptingCVE-2022-39335.4 Medium