Skip to content
Noroxi

g5plus records

20 published records for vendor g5plus.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
35%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23
  2. 24
  3. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

20 records
  • CVE-2024-13545
    39Monitor

    Bootstrap Ultimate <= 1.4.9 - Unauthenticated Limited Local File Inclusion

    CriticalCVSS 9.8No exploitEPSS 1%

    g5plus · ultimate bootstrap elements for elementorJan 24, 2025

  • CVE-2025-30849
    39Monitor

    WordPress Essential Real Estate plugin <= 5.2.0 - Local File Inclusion Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    g5plus · essential real estateApr 1, 2025

  • CVE-2024-24797
    39Monitor

    WordPress ERE Recently Viewed Plugin <= 1.3 is vulnerable to PHP Object Injection

    CriticalCVSS 9.8No exploitEPSS 1%

    g5plus · ere recently viewedFeb 12, 2024

  • CVE-2025-48126
    39Monitor

    WordPress Essential Real Estate plugin <= 5.2.9 - Local File Inclusion vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    g5plus · essential real estateJun 9, 2025

  • CVE-2023-6827
    35Monitor

    Essential Real Estate <= 4.3.5 - Authenticated (Subscriber+) Arbitrary File Upload

    HighCVSS 8.8No exploitEPSS 1%

    g5plus · essential real estateDec 15, 2023

  • CVE-2023-6140
    35Monitor

    Essential Real Estate < 4.4 - Subscriber+ Arbitrary File Upload

    HighCVSS 8.8No exploitEPSS 1%

    g5plus · essential real estateJan 8, 2024

  • CVE-2024-13418
    35Monitor

    Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File Upload

    HighCVSS 8.8No exploitEPSS 1%

    g5plus · aprilMay 2, 2025

  • CVE-2024-43140
    35Monitor

    WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.4 - Local File Inclusion vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    g5plus · ultimate bootstrap elements for elementorAug 13, 2024

  • CVE-2024-37462
    35Monitor

    WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.2 - Local File Inclusion vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    g5plus · ultimate bootstrap elements for elementorJul 9, 2024

  • CVE-2023-6139
    26Monitor

    Essential Real Estate < 4.4.0 - Subscriber+ Denial of Service via Arbitrary Option Update

    MediumCVSS 6.5No exploitEPSS 1%

    g5plus · essential real estateJan 8, 2024

  • CVE-2024-1398
    25Monitor

    Ultimate Bootstrap Elements for Elementor <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 6.4No exploitEPSS 1%

    g5plus · ultimate bootstrap elements for elementorMar 2, 2024

  • CVE-2023-6141
    21Monitor

    Essential Real Estate < 4.4.0 - Subscriber+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 0%

    g5plus · essential real estateJan 8, 2024

  • CVE-2024-4273
    21Monitor

    Essential Real Estate <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    g5plus · essential real estateJun 4, 2024

  • CVE-2024-2132
    21Monitor

    Ultimate Bootstrap Elements for Elementor <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Widget

    MediumCVSS 5.4No exploitEPSS 0%

    g5plus · ultimate bootstrap elements for elementorApr 6, 2024

  • CVE-2024-13419
    21Monitor

    Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    g5plus · aprilMay 2, 2025

  • CVE-2024-4274
    17Monitor

    Essential Real Estate <= 4.4.2 - Insecure Direct Object Reference to Arbitrary Attachment Deletion

    MediumCVSS 4.3No exploitEPSS 0%

    g5plus · essential real estateJun 4, 2024

  • CVE-2024-10329
    17Monitor

    Ultimate Bootstrap Elements for Elementor <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure

    MediumCVSS 4.3No exploitEPSS 0%

    g5plus · ultimate bootstrap elements for elementorNov 5, 2024

  • CVE-2024-12329
    17Monitor

    Essential Real Estate <= 5.1.6 - Missing Authorization to Authenticated (Contributor+) Information Exposure

    MediumCVSS 4.3No exploitEPSS 0%

    g5plus · essential real estateDec 12, 2024

  • CVE-2024-13420
    17Monitor

    Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Settings Updates

    MediumCVSS 4.3No exploitEPSS 0%

    g5plus · aprilMay 2, 2025

  • CVE-2025-24698
    17Monitor

    WordPress Essential Real Estate plugin <= 5.1.8 - Cross Site Request Forgery (CSRF) vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    g5plus · essential real estateJan 24, 2025