g5plus kayıtları
g5plus üreticisine ait 20 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %35
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-434 Unrestricted Upload of File with Dangerous Type3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-862 Missing Authorization2
- CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
20 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-13545İstismar yok | Bootstrap Ultimate <= 1.4.9 - Unauthenticated Limited Local File Inclusiong5plus · ultimate bootstrap elements for elementor · CWE-22 | Kritik9,8 | — | %1,3 | 24 Oca 2025 |
39İzleyin | CVE-2025-30849İstismar yok | WordPress Essential Real Estate plugin <= 5.2.0 - Local File Inclusion Vulnerabilityg5plus · essential real estate · CWE-98 | Kritik9,8 | — | %0,8 | 1 Nis 2025 |
39İzleyin | CVE-2024-24797İstismar yok | WordPress ERE Recently Viewed Plugin <= 1.3 is vulnerable to PHP Object Injectiong5plus · ere recently viewed · CWE-502 | Kritik9,8 | — | %0,6 | 12 Şub 2024 |
39İzleyin | CVE-2025-48126İstismar yok | WordPress Essential Real Estate plugin <= 5.2.9 - Local File Inclusion vulnerabilityg5plus · essential real estate · CWE-98 | Kritik9,8 | — | %0,6 | 9 Haz 2025 |
35İzleyin | CVE-2023-6827İstismar yok | Essential Real Estate <= 4.3.5 - Authenticated (Subscriber+) Arbitrary File Uploadg5plus · essential real estate · CWE-434 | Yüksek8,8 | — | %1,3 | 15 Ara 2023 |
35İzleyin | CVE-2023-6140İstismar yok | Essential Real Estate < 4.4 - Subscriber+ Arbitrary File Uploadg5plus · essential real estate · CWE-434 | Yüksek8,8 | — | %1,1 | 8 Oca 2024 |
35İzleyin | CVE-2024-13418İstismar yok | Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File Uploadg5plus · april · CWE-434 | Yüksek8,8 | — | %0,8 | 2 May 2025 |
35İzleyin | CVE-2024-43140İstismar yok | WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.4 - Local File Inclusion vulnerabilityg5plus · ultimate bootstrap elements for elementor · CWE-22 | Yüksek8,8 | — | %0,6 | 13 Ağu 2024 |
35İzleyin | CVE-2024-37462İstismar yok | WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.2 - Local File Inclusion vulnerabilityg5plus · ultimate bootstrap elements for elementor · CWE-22 | Yüksek8,8 | — | %0,6 | 9 Tem 2024 |
26İzleyin | CVE-2023-6139İstismar yok | Essential Real Estate < 4.4.0 - Subscriber+ Denial of Service via Arbitrary Option Updateg5plus · essential real estate · CWE-862 | Orta6,5 | — | %0,6 | 8 Oca 2024 |
25İzleyin | CVE-2024-1398İstismar yok | Ultimate Bootstrap Elements for Elementor <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scriptingg5plus · ultimate bootstrap elements for elementor · CWE-79 | Orta6,4 | — | %0,5 | 2 Mar 2024 |
21İzleyin | CVE-2023-6141İstismar yok | Essential Real Estate < 4.4.0 - Subscriber+ Stored XSSg5plus · essential real estate · CWE-79 | Orta5,4 | — | %0,4 | 8 Oca 2024 |
21İzleyin | CVE-2024-4273İstismar yok | Essential Real Estate <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeg5plus · essential real estate · CWE-79 | Orta5,4 | — | %0,3 | 4 Haz 2024 |
21İzleyin | CVE-2024-2132İstismar yok | Ultimate Bootstrap Elements for Elementor <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Widgetg5plus · ultimate bootstrap elements for elementor · CWE-79 | Orta5,4 | — | %0,3 | 6 Nis 2024 |
21İzleyin | CVE-2024-13419İstismar yok | Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scriptingg5plus · april · CWE-862 | Orta5,4 | — | %0,2 | 2 May 2025 |
17İzleyin | CVE-2024-4274İstismar yok | Essential Real Estate <= 4.4.2 - Insecure Direct Object Reference to Arbitrary Attachment Deletiong5plus · essential real estate · CWE-639 | Orta4,3 | — | %0,5 | 4 Haz 2024 |
17İzleyin | CVE-2024-10329İstismar yok | Ultimate Bootstrap Elements for Elementor <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposureg5plus · ultimate bootstrap elements for elementor · CWE-200 | Orta4,3 | — | %0,4 | 5 Kas 2024 |
17İzleyin | CVE-2024-12329İstismar yok | Essential Real Estate <= 5.1.6 - Missing Authorization to Authenticated (Contributor+) Information Exposureg5plus · essential real estate · CWE-200 | Orta4,3 | — | %0,4 | 12 Ara 2024 |
17İzleyin | CVE-2024-13420İstismar yok | Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Settings Updatesg5plus · april · CWE-94 | Orta4,3 | — | %0,2 | 2 May 2025 |
17İzleyin | CVE-2025-24698İstismar yok | WordPress Essential Real Estate plugin <= 5.1.8 - Cross Site Request Forgery (CSRF) vulnerabilityg5plus · essential real estate · CWE-352 | Orta4,3 | — | %0,2 | 24 Oca 2025 |
- CVE-2024-1354539İzleyin
Bootstrap Ultimate <= 1.4.9 - Unauthenticated Limited Local File Inclusion
KritikCVSS 9,8İstismar yokEPSS %1g5plus · ultimate bootstrap elements for elementor24 Oca 2025
- CVE-2025-3084939İzleyin
WordPress Essential Real Estate plugin <= 5.2.0 - Local File Inclusion Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1g5plus · essential real estate1 Nis 2025
- CVE-2024-2479739İzleyin
WordPress ERE Recently Viewed Plugin <= 1.3 is vulnerable to PHP Object Injection
KritikCVSS 9,8İstismar yokEPSS %1g5plus · ere recently viewed12 Şub 2024
- CVE-2025-4812639İzleyin
WordPress Essential Real Estate plugin <= 5.2.9 - Local File Inclusion vulnerability
KritikCVSS 9,8İstismar yokEPSS %1g5plus · essential real estate9 Haz 2025
- CVE-2023-682735İzleyin
Essential Real Estate <= 4.3.5 - Authenticated (Subscriber+) Arbitrary File Upload
YüksekCVSS 8,8İstismar yokEPSS %1g5plus · essential real estate15 Ara 2023
- CVE-2023-614035İzleyin
Essential Real Estate < 4.4 - Subscriber+ Arbitrary File Upload
YüksekCVSS 8,8İstismar yokEPSS %1g5plus · essential real estate8 Oca 2024
- CVE-2024-1341835İzleyin
Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File Upload
YüksekCVSS 8,8İstismar yokEPSS %1g5plus · april2 May 2025
- CVE-2024-4314035İzleyin
WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.4 - Local File Inclusion vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1g5plus · ultimate bootstrap elements for elementor13 Ağu 2024
- CVE-2024-3746235İzleyin
WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.2 - Local File Inclusion vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1g5plus · ultimate bootstrap elements for elementor9 Tem 2024
- CVE-2023-613926İzleyin
Essential Real Estate < 4.4.0 - Subscriber+ Denial of Service via Arbitrary Option Update
OrtaCVSS 6,5İstismar yokEPSS %1g5plus · essential real estate8 Oca 2024
- CVE-2024-139825İzleyin
Ultimate Bootstrap Elements for Elementor <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 6,4İstismar yokEPSS %1g5plus · ultimate bootstrap elements for elementor2 Mar 2024
- CVE-2023-614121İzleyin
Essential Real Estate < 4.4.0 - Subscriber+ Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0g5plus · essential real estate8 Oca 2024
- CVE-2024-427321İzleyin
Essential Real Estate <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0g5plus · essential real estate4 Haz 2024
- CVE-2024-213221İzleyin
Ultimate Bootstrap Elements for Elementor <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Widget
OrtaCVSS 5,4İstismar yokEPSS %0g5plus · ultimate bootstrap elements for elementor6 Nis 2024
- CVE-2024-1341921İzleyin
Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0g5plus · april2 May 2025
- CVE-2024-427417İzleyin
Essential Real Estate <= 4.4.2 - Insecure Direct Object Reference to Arbitrary Attachment Deletion
OrtaCVSS 4,3İstismar yokEPSS %0g5plus · essential real estate4 Haz 2024
- CVE-2024-1032917İzleyin
Ultimate Bootstrap Elements for Elementor <= 1.4.6 - Authenticated (Contributor+) Sensitive Information Exposure
OrtaCVSS 4,3İstismar yokEPSS %0g5plus · ultimate bootstrap elements for elementor5 Kas 2024
- CVE-2024-1232917İzleyin
Essential Real Estate <= 5.1.6 - Missing Authorization to Authenticated (Contributor+) Information Exposure
OrtaCVSS 4,3İstismar yokEPSS %0g5plus · essential real estate12 Ara 2024
- CVE-2024-1342017İzleyin
Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Settings Updates
OrtaCVSS 4,3İstismar yokEPSS %0g5plus · april2 May 2025
- CVE-2025-2469817İzleyin
WordPress Essential Real Estate plugin <= 5.1.8 - Cross Site Request Forgery (CSRF) vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0g5plus · essential real estate24 Oca 2025