VendorsG5Plusessential_real_estateany version
Vulnerabilities

G5Plus Essential Real Estate 3.9.6 for WordPress any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

10CVEs
CVE-2025-30849
WordPress Essential Real Estate plugin <= 5.2.0 - Local File Inclusion Vulnerability
Published 2025-04-01 · Modified
9.8EPSS 0.008
CVE-2025-48126
WordPress Essential Real Estate plugin <= 5.2.9 - Local File Inclusion vulnerability
Published 2025-06-09 · Modified
9.8EPSS 0.006
CVE-2023-6827
Essential Real Estate <= 4.3.5 - Authenticated (Subscriber+) Arbitrary File Upload
Published 2023-12-15 · Modified
8.8EPSS 0.013
CVE-2023-6140
Essential Real Estate < 4.4 - Subscriber+ Arbitrary File Upload
Published 2024-01-08 · Modified
8.8EPSS 0.011
CVE-2023-6139
Essential Real Estate < 4.4.0 - Subscriber+ Denial of Service via Arbitrary Option Update
Published 2024-01-08 · Modified
6.5EPSS 0.006
CVE-2024-4273
Essential Real Estate <= 4.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published 2024-06-04 · Modified
6.4EPSS 0.003
CVE-2023-6141
Essential Real Estate < 4.4.0 - Subscriber+ Stored XSS
Published 2024-01-08 · Modified
5.4EPSS 0.004
CVE-2024-4274
Essential Real Estate <= 4.4.2 - Insecure Direct Object Reference to Arbitrary Attachment Deletion
Published 2024-06-04 · Modified
4.3EPSS 0.005
CVE-2024-12329
Essential Real Estate <= 5.1.6 - Missing Authorization to Authenticated (Contributor+) Information Exposure
Published 2024-12-12 · Analyzed
4.3EPSS 0.004
CVE-2025-24698
WordPress Essential Real Estate plugin <= 5.1.8 - Cross Site Request Forgery (CSRF) vulnerability
Published 2025-01-24 · Modified
4.3EPSS 0.002