G5plus vulnerabilities
We track 3 vulnerabilities in G5plus products across 6 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 2, 2025.
Latest G5plus vulnerabilities
- 8.8 High severity
Benaa Framework: Unrestricted Upload of File with Dangerous Type
Multiple plugins and/or themes for WordPress are vulnerable to Arbitrary File Uploads due to a missing capability check on the ajaxUploadFonts() function in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and
- 9.8 Critical severity
Bootstrap Ultimate: Improper Limitation of a Pathname to a Restricted Directory
The Bootstrap Ultimate theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.9 via the path parameter. This makes it possible for unauthenticated attackers to include PHP files on the server, allowing the execution
- 9.8 Critical severity
ERE Recently Viewed – Essential Real Estate…: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in G5Theme ERE Recently Viewed – Essential Real Estate Add-On.This issue affects ERE Recently Viewed – Essential Real Estate Add-On: from n/a through 1.3.