G5Theme vulnerabilities
34 published CVEs name G5Theme among the affected products.
- Published CVEs
- 34
- Last 12 months
- 11
- Critical
- 1
- Known exploited
- 0
Critical 1High 17Medium 16Low 0Not scored 0
CVEs per yearBy the year they were published
- 20234
- 202411
- 202510
- 20269
Newest CVEs
- CVE-2026-32465
WordPress Essential Real Estate plugin <= 5.3.3 - PHP Object Injection vulnerability
g5theme · Essential Real Estate
High8.8 - CVE-2026-39714
WordPress G5Plus April theme <= 6.8 - Broken Access Control vulnerability
G5Theme · G5Plus April
Medium5.3 - CVE-2026-39668
WordPress Book Previewer for Woocommerce plugin <= 1.0.6 - Broken Access Control vulnerability
g5theme · Book Previewer for Woocommerce
Medium5.3 - CVE-2026-27088
WordPress Darna Framework plugin <= 2.9 - Reflected Cross Site Scripting (XSS) vulnerability
G5Theme · Darna Framework
High7.1 - CVE-2026-27087
WordPress Wolverine Framework plugin <= 1.9 - Reflected Cross Site Scripting (XSS) vulnerability
G5Theme · Wolverine Framework
High7.1 - CVE-2026-22520
WordPress Handmade Framework plugin <= 3.9 - Reflected Cross Site Scripting (XSS) vulnerability
G5Theme · Handmade Framework
High7.1 - CVE-2025-69096
WordPress Zorka theme <= 1.5.7 - Reflected Cross Site Scripting (XSS) vulnerability
G5Theme · Zorka
High7.1 - CVE-2026-22521
WordPress Handmade Framework plugin <= 3.9 - Local File Inclusion vulnerability
G5Theme · Handmade Framework
High7.5 - CVE-2026-0676
WordPress Zorka theme <= 1.5.7 - Broken Access Control vulnerability
G5Theme · Zorka
Medium5.3 - CVE-2025-68071
WordPress Essential Real Estate plugin <= 5.3.2 - Insecure Direct Object References (IDOR) vulnerability
g5theme · Essential Real Estate
Medium6.5
Products with the most CVEs
Most common weaknesses
- CWE-79 Cross-site scripting (XSS)9
- CWE-862 Missing authorization8
- CWE-98 PHP remote file inclusion5
- CWE-200 Exposure of sensitive information2
- CWE-22 Path traversal2
- CWE-434 Unrestricted file upload2
- CWE-502 Deserialization of untrusted data2
- CWE-639 Authorization bypass through a user-controlled key (IDOR)2
- CWE-94 Code injection2
- CWE-352 Cross-site request forgery (CSRF)1