Lucene search
+L

107 matches found

Positive Technologies
Positive Technologies
•added 2026/03/25 12:00 a.m.•18 views

PT-2026-27838

Name of the Vulnerable Software and Affected Versions G5Theme Handmade Framework versions through 3.9 Description The software contains a flaw related to improper input handling during web page creation, leading to a Reflected Cross-Site Scripting XSS condition. This allows an attacker to inject...

7.1CVSS5.9AI score0.0023EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/03/25 12:00 a.m.•32 views

PT-2026-27985

Name of the Vulnerable Software and Affected Versions G5Theme Darna Framework versions through 2.9 Description The Darna Framework contains a flaw due to improper neutralization of input during web page generation, leading to a Reflected Cross-Site Scripting XSS condition. This allows for the...

7.1CVSS5.9AI score0.00251EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•1 views

CVE-2025-69096: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in G5Theme Zorka zorka allows Reflected XSS.This issue affects Zorka: from n/a through = 1.5.7...

7.1CVSS5.8AI score0.0023EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/25 12:00 a.m.•16 views

PT-2026-27984

Name of the Vulnerable Software and Affected Versions G5Theme Wolverine Framework versions n/a through 1.9 Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a reflected cross-site scripting issue. This allows for potential...

7.1CVSS6AI score0.00251EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•1 views

CVE-2026-27087: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in G5Theme Wolverine Framework wolverine-framework allows Reflected XSS.This issue affects Wolverine Framework: from n/a through = 1.9...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/10 5:41 a.m.•13 views

CVE-2026-0676

Missing Authorization vulnerability in G5Theme Zorka zorka allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zorka: from n/a through = 1.5.7...

5.3CVSS5.9AI score0.00254EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/10 5:40 a.m.•14 views

CVE-2026-22521

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in G5Theme Handmade Framework handmade-framework allows PHP Local File Inclusion.This issue affects Handmade Framework: from n/a through = 3.9...

7.5CVSS5.9AI score0.00451EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/08 10:15 a.m.•15 views

CVE-2026-0676

Missing Authorization vulnerability in G5Theme Zorka zorka allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zorka: from n/a through = 1.5.7...

5.3CVSS0.00254EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/08 12:00 a.m.•13 views

PT-2026-1970

Name of the Vulnerable Software and Affected Versions G5Theme Zorka versions through 1.5.7 Description An issue exists in G5Theme Zorka related to incorrectly configured access control security levels, allowing for missing authorization. The issue allows exploitation of these levels...

5.3CVSS6.6AI score0.00254EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/08 12:00 a.m.•1 views

CVE-2026-0676: Missing Authorization

Missing Authorization vulnerability in G5Theme Zorka zorka allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zorka: from n/a through = 1.5.7...

5.3CVSS5.9AI score0.00254EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/17 10:03 a.m.•15 views

CVE-2025-68071

Authorization Bypass Through User-Controlled Key vulnerability in g5theme Essential Real Estate essential-real-estate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Real Estate: from n/a through = 5.3.2...

6.5CVSS5.7AI score0.00253EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/17 10:02 a.m.•12 views

CVE-2025-66127

Missing Authorization vulnerability in g5theme Essential Real Estate essential-real-estate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Real Estate: from n/a through = 5.3.2...

5.3CVSS5.7AI score0.0027EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/16 9:31 a.m.•15 views

EUVD-2025-203543

Authorization Bypass Through User-Controlled Key vulnerability in g5theme Essential Real Estate essential-real-estate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Real Estate: from n/a through = 5.2.2...

6.5CVSS6.5AI score0.00253EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/12/16 9:31 a.m.•13 views

EUVD-2025-203583

Missing Authorization vulnerability in g5theme Essential Real Estate essential-real-estate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Real Estate: from n/a through = 5.2.2...

5.4CVSS6.5AI score0.0027EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/16 9:16 a.m.•20 views

CVE-2025-68071

Authorization Bypass Through User-Controlled Key vulnerability in g5theme Essential Real Estate essential-real-estate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Real Estate: from n/a through = 5.3.2...

6.5CVSS0.00253EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/16 9:15 a.m.•12 views

CVE-2025-66127

Missing Authorization vulnerability in g5theme Essential Real Estate essential-real-estate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Real Estate: from n/a through = 5.3.2...

5.3CVSS0.0027EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/16 12:00 a.m.•15 views

PT-2025-51415

Name of the Vulnerable Software and Affected Versions Essential Real Estate versions through 5.2.2 Description An authorization issue exists in g5theme Essential Real Estate, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Essential Real Esta...

5.4CVSS6.6AI score0.0027EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/12/16 12:00 a.m.•26 views

PT-2025-51455

Name of the Vulnerable Software and Affected Versions g5theme Essential Real Estate versions through 5.2.2 Description An authorization bypass exists due to incorrectly configured access control security levels. This allows for unauthorized access. The issue is present in g5theme Essential Real...

6.5CVSS6.5AI score0.00253EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/22 3:31 p.m.•17 views

EUVD-2025-35464

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in G5Theme Grid Plus grid-plus allows Reflected XSS.This issue affects Grid Plus: from n/a through = 3.3...

5.9AI score0.0025EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/22 3:15 p.m.•17 views

CVE-2025-53352

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in G5Theme Grid Plus grid-plus allows Reflected XSS.This issue affects Grid Plus: from n/a through = 3.3...

7.1CVSS0.0025EPSS
SaveExploits0References1
Rows per page
Query Builder