CVEs we hold for G5theme
Records whose assigning authority named G5theme as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-39714WordPress G5Plus April theme <= 6.8 - Broken Access Control vulnerabilityG5Theme G5Plus April
CVE-2026-39668WordPress Book Previewer for Woocommerce plugin <= 1.0.6 - Broken Access Control vulnerabilityg5theme Book Previewer for Woocommerce
CVE-2026-32465WordPress Essential Real Estate plugin <= 5.3.3 - PHP Object Injection vulnerabilityg5theme Essential Real Estate
CVE-2026-27088WordPress Darna Framework plugin <= 2.9 - Reflected Cross Site Scripting (XSS) vulnerabilityG5Theme Darna Framework
CVE-2026-27087WordPress Wolverine Framework plugin <= 1.9 - Reflected Cross Site Scripting (XSS) vulnerabilityG5Theme Wolverine Framework
CVE-2026-22521WordPress Handmade Framework plugin <= 3.9 - Local File Inclusion vulnerabilityG5Theme Handmade Framework
CVE-2026-22520WordPress Handmade Framework plugin <= 3.9 - Reflected Cross Site Scripting (XSS) vulnerabilityG5Theme Handmade Framework
CVE-2025-69096WordPress Zorka theme <= 1.5.7 - Reflected Cross Site Scripting (XSS) vulnerabilityG5Theme Zorka
CVE-2025-68071WordPress Essential Real Estate plugin <= 5.3.2 - Insecure Direct Object References (IDOR) vulnerabilityg5theme Essential Real Estate
CVE-2025-66127WordPress Essential Real Estate plugin <= 5.3.2 - Broken Access Control vulnerabilityg5theme Essential Real Estate
CVE-2025-53352WordPress Grid Plus plugin <= 3.3 - Cross Site Scripting (XSS) vulnerabilityG5Theme Grid Plus
CVE-2025-48126WordPress Essential Real Estate plugin <= 5.2.9 - Local File Inclusion vulnerabilityg5theme Essential Real Estate
CVE-2025-32672WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.9 - Local File Inclusion Vulnerabilityg5theme Ultimate Bootstrap Elements for Elementor
CVE-2025-30849WordPress Essential Real Estate plugin <= 5.2.0 - Local File Inclusion Vulnerabilityg5theme Essential Real Estate
CVE-2025-24698WordPress Essential Real Estate plugin <= 5.1.8 - Cross Site Request Forgery (CSRF) vulnerabilityg5theme Essential Real Estate
CVE-2024-43140WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.4 - Local File Inclusion vulnerabilityG5Theme Ultimate Bootstrap Elements for Elementor
CVE-2024-4274Essential Real Estate <= 4.4.2 - Insecure Direct Object Reference to Arbitrary Attachment Deletiong5theme Essential Real Estate
CVE-2024-4273Essential Real Estate <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeg5theme Essential Real Estate
CVE-2024-37462WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.2 - Local File Inclusion vulnerabilityG5Theme Ultimate Bootstrap Elements for Elementor
CVE-2024-24797WordPress ERE Recently Viewed Plugin <= 1.3 is vulnerable to PHP Object InjectionG5Theme ERE Recently Viewed – Essential Real Estate Add-On
CVE-2024-2132Ultimate Bootstrap Elements for Elementor <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image…g5theme Ultimate Bootstrap Elements for Elementor
CVE-2024-1398Ultimate Bootstrap Elements for Elementor <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scriptingg5theme Ultimate Bootstrap Elements for Elementor
CVE-2024-13420Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Settings UpdatesG5Theme Auteur Framework
CVE-2024-13419Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site ScriptingG5Theme Auteur Framework
CVE-2024-13418Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File UploadG5Theme Auteur Framework
CVE-2024-12329Essential Real Estate <= 5.1.6 - Missing Authorization to Authenticated (Contributor+) Information Exposureg5theme Essential Real Estate
CVE-2024-10910Grid Plus – Unlimited grid layout <= 1.3.5 - Unauthenticated Arbitrary Shortcode Execution via…g5theme Grid Plus – Unlimited grid layout
CVE-2024-10329Ultimate Bootstrap Elements for Elementor <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposureg5theme Ultimate Bootstrap Elements for Elementor
CVE-2023-6827Essential Real Estate <= 4.3.5 - Authenticated (Subscriber+) Arbitrary File Uploadg5theme Essential Real Estate
CVE-2023-5251Grid Plus <= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Grid Layout Add/Update/Deleteg5theme Grid Plus – Unlimited grid layout
CVE-2023-5250Grid Plus <= 1.3.3 - Authenticated (Subscriber+) Local File Inclusion via Shortcodeg5theme Grid Plus – Unlimited grid layout
CVE-2023-46209WordPress Grid Plus Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)G5Theme Grid Plus – Unlimited grid layout
CVE-2023-34014WordPress Grid Plus plugin <= 1.3.2 - Broken Access Control vulnerabilityG5Theme Grid Plus
34 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.