G5Theme

Products

ProductCVEsExploitedLatest
Essential Real Estate10–Aug 18, 2026
Ultimate Bootstrap Elements for Elementor6–Apr 11, 2025
Grid Plus – Unlimited grid layout4–Dec 12, 2024
Beyot Framework3–May 2, 2025
April Framework3–May 2, 2025
Auteur Framework3–May 2, 2025
Benaa Framework3–May 2, 2025
Zorka2–Mar 25, 2026
Grid Plus2–Oct 22, 2025
Handmade Framework2–Mar 25, 2026
Darna Framework1–Mar 25, 2026
ERE Recently Viewed – Essential Real Estate Add-On1–Feb 12, 2024
Book Previewer for Woocommerce1–Apr 8, 2026
G5Plus April1–Apr 8, 2026
Wolverine Framework1–Mar 25, 2026

Exploited and recent CVEs

  • CVE-2026-32465 High 8.8 WordPress Essential Real Estate plugin <= 5.3.3 - PHP Object Injection vulnerability 0.5%
  • CVE-2026-39714 Medium 5.3 WordPress G5Plus April theme <= 6.8 - Broken Access Control vulnerability 0.2%
  • CVE-2026-39668 Medium 5.3 WordPress Book Previewer for Woocommerce plugin <= 1.0.6 - Broken Access Control vulnerability 0.2%
  • CVE-2026-27088 High 7.1 WordPress Darna Framework plugin <= 2.9 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-27087 High 7.1 WordPress Wolverine Framework plugin <= 1.9 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-22520 High 7.1 WordPress Handmade Framework plugin <= 3.9 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-69096 High 7.1 WordPress Zorka theme <= 1.5.7 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-22521 High 7.5 WordPress Handmade Framework plugin <= 3.9 - Local File Inclusion vulnerability 0.5%
  • CVE-2026-0676 Medium 5.3 WordPress Zorka theme <= 1.5.7 - Broken Access Control vulnerability 0.3%
  • CVE-2025-68071 Medium 6.5 WordPress Essential Real Estate plugin <= 5.3.2 - Insecure Direct Object References (IDOR) vulnerability 0.3%
  • CVE-2025-66127 Medium 5.3 WordPress Essential Real Estate plugin <= 5.3.2 - Broken Access Control vulnerability 0.3%
  • CVE-2025-53352 High 7.1 WordPress Grid Plus plugin <= 3.3 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-48126 High 8.1 WordPress Essential Real Estate plugin <= 5.2.9 - Local File Inclusion vulnerability 0.6%
  • CVE-2024-13418 High 8.8 Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File Upload 0.8%
  • CVE-2024-13418 High 8.8 Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File Upload 0.8%
  • CVE-2024-13418 High 8.8 Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File Upload 0.8%
  • CVE-2024-13418 High 8.8 Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File Upload 0.8%
  • CVE-2024-13420 Medium 4.3 Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Settings Updates 0.2%
  • CVE-2024-13420 Medium 4.3 Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Settings Updates 0.2%
  • CVE-2024-13420 Medium 4.3 Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Settings Updates 0.2%
  • CVE-2024-13420 Medium 4.3 Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Settings Updates 0.2%
  • CVE-2024-13419 Medium 6.4 Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting 0.2%
  • CVE-2024-13419 Medium 6.4 Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting 0.2%
  • CVE-2024-13419 Medium 6.4 Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting 0.2%
  • CVE-2024-13419 Medium 6.4 Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting 0.2%
  • CVE-2025-32672 High 8.1 WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.9 - Local File Inclusion Vulnerability 1.0%
  • CVE-2025-30849 High 8.1 WordPress Essential Real Estate plugin <= 5.2.0 - Local File Inclusion Vulnerability 0.8%
  • CVE-2025-24698 Medium 4.3 WordPress Essential Real Estate plugin <= 5.1.8 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2023-34014 Medium 5.4 WordPress Grid Plus plugin <= 1.3.2 - Broken Access Control vulnerability 0.4%
  • CVE-2024-12329 Medium 4.3 Essential Real Estate <= 5.1.6 - Missing Authorization to Authenticated (Contributor+) Information Exposure 0.4%