CVE-2024-24797 is a critical Deserialization of Untrusted Data vulnerability affecting G5Theme ERE Recently Viewed – Essential Real Estate Add-On versions up to and including 1.3. This flaw carries a CVSS score of 9.8, indicating a severe risk where an unauthenticated attacker can remotely execute arbitrary code with high impact on confidentiality, integrity, and availability. Currently, there is no public exploit intelligence, such as Metasploit or Nuclei modules, nor is it listed in CISA's KEV catalog. Community discussion and media coverage for this vulnerability are minimal, which is typical for the majority of CVEs.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 2.0CPE matchmatch criteria | cpe:2.3:a:g5plus:ere_recently_viewed:*:*:*:*:*:wordpress:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.