PatchTheCVEg5plus vulnerabilities
Recent CVEs affecting g5plus products. 11 tracked.
g5plus has 11 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 11. Most recent: 2025-06-09. Highest priority: CVE-2024-13545 (score 57/100).
- CVE-2025-48126 HIGH 8.1 UPGRADE Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner
- CVE-2025-30849 HIGH 8.1 UPGRADE Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulner
- CVE-2025-24698 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in g5theme Essential Real Estate essential-real-estate allows
- CVE-2024-43140 HIGH 7.5 UPGRADE Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in G5Theme Ultima
- CVE-2024-37462 HIGH 8.5 UPGRADE Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in G5Theme Ultima
- CVE-2024-13545 CRITICAL 9.8 UPGRADE The Bootstrap Ultimate theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and in
- CVE-2024-13420 MEDIUM 4.3 UPGRADE UPGRADE Multiple plugins and/or themes for WordPress are vulnerable to unauthorized access due to a missing capability
- CVE-2024-13419 MEDIUM 6.4 UPGRADE UPGRADE Multiple plugins and/or themes for WordPress using Smart Framework are vulnerable to Stored Cross-Site Scripti
- CVE-2024-13418 HIGH 8.8 UPGRADE UPGRADE Multiple plugins and/or themes for WordPress are vulnerable to Arbitrary File Uploads due to a missing capabil
- CVE-2024-12329 MEDIUM 4.3 UPGRADE The Essential Real Estate plugin for WordPress is vulnerable to unauthorized access of data due to a missing c
- CVE-2024-10329 MEDIUM 4.3 UPGRADE The Ultimate Bootstrap Elements for Elementor plugin for WordPress is vulnerable to Sensitive Information Expo
FAQ
How do I fix g5plus vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is g5plus being exploited right now?
None of the tracked g5plus CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which g5plus CVE should I patch first?
CVE-2024-13545 currently ranks highest (57/100): The Bootstrap Ultimate theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and in.