File and Path Handling

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. Grid Plus <= 1.3.3 - Authenticated (Subscriber+) Local File Inclusion via ShortcodeCVE-2023-5250g5theme · CVSS 8.8 · 1.3% likely

   CWE-98

2. Essential Real Estate <= 4.3.5 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2023-6827g5theme · CVSS 7.5 · 1.3% likely

   CWE-434

3. WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.9 - Local File Inclusion VulnerabilityCVE-2025-32672g5theme · CVSS 8.1 · 1.0% likely

   CWE-98

4. WordPress Essential Real Estate plugin <= 5.2.0 - Local File Inclusion VulnerabilityCVE-2025-30849g5theme · CVSS 8.1 · 0.8% likely

   CWE-98

5. Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File UploadCVE-2024-13418G5Theme · CVSS 8.8 · 0.8% likely

   CWE-434

6. WordPress Essential Real Estate plugin <= 5.2.9 - Local File Inclusion vulnerabilityCVE-2025-48126g5theme · CVSS 8.1 · 0.6% likely

   CWE-98

7. WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.4 - Local File Inclusion vulnerabilityCVE-2024-43140G5Theme · CVSS 7.5 · 0.6% likely

   CWE-22

8. WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.2 - Local File Inclusion vulnerabilityCVE-2024-37462G5Theme · CVSS 8.5 · 0.6% likely

   CWE-22

9. WordPress Handmade Framework plugin <= 3.9 - Local File Inclusion vulnerabilityCVE-2026-22521G5Theme · CVSS 7.5 · 0.5% likely

   CWE-98

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.