Vulnerabilities > G5Plus > Ultimate Bootstrap Elements FOR Elementor > 1.1.12

DATE CVE VULNERABILITY TITLE RISK
2025-01-24 CVE-2024-13545 Unspecified vulnerability in G5Plus Ultimate Bootstrap Elements for Elementor
The Bootstrap Ultimate theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.9 via the path parameter.
network
low complexity
g5plus
critical
9.8
2024-11-05 CVE-2024-10329 Unspecified vulnerability in G5Plus Ultimate Bootstrap Elements for Elementor
The Ultimate Bootstrap Elements for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6 via the 'ube_get_page_templates' function.
network
low complexity
g5plus
4.3
2024-08-13 CVE-2024-43140 Path Traversal vulnerability in G5Plus Ultimate Bootstrap Elements for Elementor
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in G5Theme Ultimate Bootstrap Elements for Elementor allows PHP Local File Inclusion.This issue affects Ultimate Bootstrap Elements for Elementor: from n/a through 1.4.4.
network
low complexity
g5plus CWE-22
8.8
2024-07-09 CVE-2024-37462 Unspecified vulnerability in G5Plus Ultimate Bootstrap Elements for Elementor
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in G5Theme Ultimate Bootstrap Elements for Elementor allows Path Traversal.This issue affects Ultimate Bootstrap Elements for Elementor: from n/a through 1.4.2.
network
low complexity
g5plus
8.8
2024-04-06 CVE-2024-2132 Cross-site Scripting vulnerability in G5Plus Ultimate Bootstrap Elements for Elementor
The Ultimate Bootstrap Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Widget in all versions up to, and including, 1.4.0 due to insufficient input sanitization and output escaping on user supplied attributes.
network
low complexity
g5plus CWE-79
5.4