What’s Vulnerable › Products

g5theme Essential Real Estate vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your g5theme Essential Real Estate version is affected

Latest g5theme Essential Real Estate vulnerabilities

• CVE-2026-32465 — WordPress Essential Real Estate plugin <= 5.3.3 - PHP Object Injection vulnerability (CVSS 8.8)
• CVE-2025-68071 — WordPress Essential Real Estate plugin <= 5.3.2 - Insecure Direct Object References (IDOR) vulnerability (CVSS 6.5)
• CVE-2025-66127 — WordPress Essential Real Estate plugin <= 5.3.2 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2025-48126 — WordPress Essential Real Estate plugin <= 5.2.9 - Local File Inclusion vulnerability (CVSS 9.8)
• CVE-2025-30849 — WordPress Essential Real Estate plugin <= 5.2.0 - Local File Inclusion Vulnerability (CVSS 9.8)
• CVE-2025-24698 — WordPress Essential Real Estate plugin <= 5.1.8 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
• CVE-2024-12329 — Essential Real Estate <= 5.1.6 - Missing Authorization to Authenticated (Contributor+) Information Exposure (CVSS 4.3)
• CVE-2024-4274 — Essential Real Estate <= 4.4.2 - Insecure Direct Object Reference to Arbitrary Attachment Deletion (CVSS 4.3)
• CVE-2024-4273 — Essential Real Estate <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 5.4)
• CVE-2023-6141 — Essential Real Estate < 4.4.0 - Subscriber+ Stored XSS (CVSS 5.4)
• CVE-2023-6140 — Essential Real Estate < 4.4 - Subscriber+ Arbitrary File Upload (CVSS 8.8)
• CVE-2023-6139 — Essential Real Estate < 4.4.0 - Subscriber+ Denial of Service via Arbitrary Option Update (CVSS 6.5)
• CVE-2023-6827 — Essential Real Estate <= 4.3.5 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8)