Vulnerabilities > G5Theme
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-10-30 | CVE-2023-5250 | Unspecified vulnerability in G5Theme Grid Plus The Grid Plus plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.3.2 via a shortcode attribute. | 8.8 |
| 2023-10-30 | CVE-2023-5251 | Missing Authorization vulnerability in G5Theme Grid Plus The Grid Plus plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'grid_plus_save_layout_callback' and 'grid_plus_delete_callback' functions in versions up to, and including, 1.3.2. | 5.4 |
| 2023-10-27 | CVE-2023-46209 | Cross-site Scripting vulnerability in G5Theme Grid-Plus Unauth. | 6.1 |
| 2022-12-12 | CVE-2022-3933 | Unspecified vulnerability in G5Theme Essential Real Estate The Essential Real Estate WordPress plugin before 3.9.6 does not sanitize and escapes some parameters, which could allow users with a role as low as Admin to perform Cross-Site Scripting attacks. | 5.4 |