https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-48126.htmlhttps://patchthecve.com/cve/CVE-2025-48126.htmlWed, 17 Jun 2026 09:29:11 +0000HIGH 8.1: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in g5theme Essential Real Estate essential-real-estate allows PHP Local File Inclusion.This issue affects Essential Real Estate: from n/a through <= 5.2.9.https://patchthecve.com/cve/CVE-2025-30849.htmlhttps://patchthecve.com/cve/CVE-2025-30849.htmlWed, 17 Jun 2026 09:09:27 +0000HIGH 8.1: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in g5theme Essential Real Estate essential-real-estate allows PHP Local File Inclusion.This issue affects Essential Real Estate: from n/a through <= 5.2.0.https://patchthecve.com/cve/CVE-2025-24698.htmlhttps://patchthecve.com/cve/CVE-2025-24698.htmlWed, 17 Jun 2026 08:59:27 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in g5theme Essential Real Estate essential-real-estate allows Cross Site Request Forgery.This issue affects Essential Real Estate: from n/a through <= 5.1.8.https://patchthecve.com/cve/CVE-2024-12329.htmlhttps://patchthecve.com/cve/CVE-2024-12329.htmlWed, 17 Jun 2026 06:59:30 +0000MEDIUM 4.3: The Essential Real Estate plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on several pages/post types in all versions up to, and including, 5.1.6. This makes it possible for authenticated attackers, with Contributor-level access and above, to acces