G5Theme
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Essential Real Estate | 10 | – | Aug 18, 2026 |
| Ultimate Bootstrap Elements for Elementor | 6 | – | Apr 11, 2025 |
| Grid Plus – Unlimited grid layout | 4 | – | Dec 12, 2024 |
| Beyot Framework | 3 | – | May 2, 2025 |
| April Framework | 3 | – | May 2, 2025 |
| Auteur Framework | 3 | – | May 2, 2025 |
| Benaa Framework | 3 | – | May 2, 2025 |
| Zorka | 2 | – | Mar 25, 2026 |
| Grid Plus | 2 | – | Oct 22, 2025 |
| Handmade Framework | 2 | – | Mar 25, 2026 |
| Darna Framework | 1 | – | Mar 25, 2026 |
| ERE Recently Viewed – Essential Real Estate Add-On | 1 | – | Feb 12, 2024 |
| Book Previewer for Woocommerce | 1 | – | Apr 8, 2026 |
| G5Plus April | 1 | – | Apr 8, 2026 |
| Wolverine Framework | 1 | – | Mar 25, 2026 |
Exploited and recent CVEs
- CVE-2026-32465 WordPress Essential Real Estate plugin <= 5.3.3 - PHP Object Injection vulnerability 0.5%
- CVE-2026-39714 WordPress G5Plus April theme <= 6.8 - Broken Access Control vulnerability 0.2%
- CVE-2026-39668 WordPress Book Previewer for Woocommerce plugin <= 1.0.6 - Broken Access Control vulnerability 0.2%
- CVE-2026-27088 WordPress Darna Framework plugin <= 2.9 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-27087 WordPress Wolverine Framework plugin <= 1.9 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-22520 WordPress Handmade Framework plugin <= 3.9 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-69096 WordPress Zorka theme <= 1.5.7 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-22521 WordPress Handmade Framework plugin <= 3.9 - Local File Inclusion vulnerability 0.5%
- CVE-2026-0676 WordPress Zorka theme <= 1.5.7 - Broken Access Control vulnerability 0.3%
- CVE-2025-68071 WordPress Essential Real Estate plugin <= 5.3.2 - Insecure Direct Object References (IDOR) vulnerability 0.3%
- CVE-2025-66127 WordPress Essential Real Estate plugin <= 5.3.2 - Broken Access Control vulnerability 0.3%
- CVE-2025-53352 WordPress Grid Plus plugin <= 3.3 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-48126 WordPress Essential Real Estate plugin <= 5.2.9 - Local File Inclusion vulnerability 0.6%
- CVE-2024-13418 Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File Upload 0.8%
- CVE-2024-13418 Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File Upload 0.8%
- CVE-2024-13418 Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File Upload 0.8%
- CVE-2024-13418 Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File Upload 0.8%
- CVE-2024-13420 Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Settings Updates 0.2%
- CVE-2024-13420 Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Settings Updates 0.2%
- CVE-2024-13420 Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Settings Updates 0.2%
- CVE-2024-13420 Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Settings Updates 0.2%
- CVE-2024-13419 Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting 0.2%
- CVE-2024-13419 Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting 0.2%
- CVE-2024-13419 Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting 0.2%
- CVE-2024-13419 Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting 0.2%
- CVE-2025-32672 WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.9 - Local File Inclusion Vulnerability 1.0%
- CVE-2025-30849 WordPress Essential Real Estate plugin <= 5.2.0 - Local File Inclusion Vulnerability 0.8%
- CVE-2025-24698 WordPress Essential Real Estate plugin <= 5.1.8 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2023-34014 WordPress Grid Plus plugin <= 1.3.2 - Broken Access Control vulnerability 0.4%
- CVE-2024-12329 Essential Real Estate <= 5.1.6 - Missing Authorization to Authenticated (Contributor+) Information Exposure 0.4%