Browse CVEs

CRITICAL 9.8 CVE-2025-48126 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in g5theme Essential Real Estat… Essential Real Estate after 5.2.2 Fix from $2,3002025-06-09 HIGH 8.8 CVE-2024-13418 Multiple plugins and/or themes for WordPress are vulnerable to Arbitrary File Uploads due to a missing capability check on the ajaxUploadFonts() func… April after 7.1 Fix from $1,9502025-05-02 MEDIUM 5.4 CVE-2024-13419 Multiple plugins and/or themes for WordPress using Smart Framework are vulnerable to Stored Cross-Site Scripting due to a missing capability check on… April after 7.1 Fix from $1,6002025-05-02 CRITICAL 9.8 CVE-2025-30849 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in g5theme Essential Real Estat… Essential Real Estate 5.2.1+ Fix from $2,3002025-04-01 CRITICAL 9.8 CVE-2024-13545 The Bootstrap Ultimate theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.9 via the path parameter. … Ultimate Bootstrap Elements For Elementor after 1.4.9 Fix from $2,3002025-01-24 HIGH 8.8 CVE-2024-43140 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in G5Theme Ultimate Bootstrap Elements for Elementor all… Ultimate Bootstrap Elements For Elementor 1.4.5+ Fix from $1,9502024-08-13 HIGH 8.8 CVE-2024-37462 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in G5Theme Ultimate Bootstrap Elements for Elementor all… Ultimate Bootstrap Elements For Elementor 1.4.3+ Fix from $1,9502024-07-09 MEDIUM 5.4 CVE-2024-4273 The Essential Real Estate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ere_property_map' shortcode in all vers… Essential Real Estate 4.4.3+ Fix from $1,6002024-06-04 MEDIUM 5.4 CVE-2024-2132 The Ultimate Bootstrap Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Widget in all versions … Ultimate Bootstrap Elements For Elementor 1.4.1+ Fix from $1,6002024-04-06 MEDIUM 6.4 CVE-2024-1398 The Ultimate Bootstrap Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘heading_title_tag’ and ’head… Ultimate Bootstrap Elements For Elementor 1.3.7+ Fix from $1,6002024-03-02 CRITICAL 9.8 CVE-2024-24797 Deserialization of Untrusted Data vulnerability in G5Theme ERE Recently Viewed – Essential Real Estate Add-On.This issue affects ERE Recently Viewed … Ere Recently Viewed 2.0+ Fix from $2,3002024-02-12 HIGH 8.8 CVE-2023-6140 The Essential Real Estate WordPress plugin before 4.4.0 does not prevent users with limited privileges on the site, like subscribers, from momentaril… Essential Real Estate 4.4.0+ Fix from $1,9502024-01-08 MEDIUM 5.4 CVE-2023-6141 The Essential Real Estate WordPress plugin before 4.4.0 does not apply proper capability checks on its AJAX actions, which among other things, allow … Essential Real Estate 4.4.0+ Fix from $1,6002024-01-08 MEDIUM 6.5 CVE-2023-6139 The Essential Real Estate WordPress plugin before 4.4.0 does not apply proper capability checks on its AJAX actions, which among other things, allow … Essential Real Estate 4.4.0+ Fix from $1,6002024-01-08 HIGH 8.8 CVE-2023-6827 The Essential Real Estate plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on the 'ajaxUploadFon… Essential Real Estate after 4.3.5 Fix from $1,9502023-12-15