Vulnerabilities > G5Theme

DATE CVE VULNERABILITY TITLE RISK
2023-10-30 CVE-2023-5250 Unspecified vulnerability in G5Theme Grid Plus 1.3.2
The Grid Plus plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.3.2 via a shortcode attribute.
network
low complexity
g5theme
8.8
2023-10-30 CVE-2023-5251 Missing Authorization vulnerability in G5Theme Grid Plus 1.3.2
The Grid Plus plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'grid_plus_save_layout_callback' and 'grid_plus_delete_callback' functions in versions up to, and including, 1.3.2.
network
low complexity
g5theme CWE-862
5.4
2023-10-27 CVE-2023-46209 Unspecified vulnerability in G5Theme Grid-Plus
Unauth.
network
low complexity
g5theme
6.1
2022-12-12 CVE-2022-3933 Unspecified vulnerability in G5Theme Essential Real Estate
The Essential Real Estate WordPress plugin before 3.9.6 does not sanitize and escapes some parameters, which could allow users with a role as low as Admin to perform Cross-Site Scripting attacks.
network
low complexity
g5theme
5.4