Codexthemes Thegem vulnerabilities

• codexthemes thegem (elementor) WordPress TheGem (Elementor) theme <= 5.12.3 - SQL Injection vulnerability CVE-2026-66609 9.3 CriticalAugust 20, 2026
• codexthemes thegem WordPress TheGem theme < 5.12.1.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-65480 6.5 MediumJuly 23, 2026
• codexthemes thegem theme elements (for elementor) WordPress TheGem Theme Elements (for Elementor) plugin < 5.12.1.1 - Local File Inclusion vulnerability CVE-2026-57804 7.5 HighJuly 13, 2026
• codexthemes thegem theme elements (for elementor) WordPress TheGem theme Elements (for Elementor) plugin < 5.12.1.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-42410 6.5 MediumApril 27, 2026
• codexthemes thegem theme elements (for wpbakery) WordPress TheGem Theme Elements (for WPBakery) plugin <= 5.11.0 - Cross Site Scripting (XSS) vulnerability CVE-2025-69360 6.5 MediumJanuary 6, 2026
• codexthemes thegem theme elements (for elementor) WordPress TheGem Theme Elements (for Elementor) plugin <= 5.11.0 - Cross Site Scripting (XSS) vulnerability CVE-2025-69357 6.5 MediumJanuary 6, 2026
• codexthemes thegem theme elements (for elementor) WordPress TheGem Theme Elements (for Elementor) plugin <= 5.11.0 - Local File Inclusion vulnerability CVE-2025-69356 7.5 HighJanuary 6, 2026
• codexthemes thegem (elementor), thegem (wpbakery) +1 more WordPress TheGem theme < 5.8.1.1 - Broken Access Control vulnerability CVE-2023-32238 5.4 MediumDecember 29, 2025
• codexthemes thegem theme elements (for elementor) WordPress TheGem Theme Elements (for Elementor) plugin <= 5.10.5.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-68559 6.5 MediumDecember 23, 2025
• codexthemes thegem theme elements (for elementor) WordPress TheGem Theme Elements (for Elementor) plugin <= 5.10.5.1 - Local File Inclusion vulnerability CVE-2025-68560 7.5 HighDecember 23, 2025
• codexthemes thegem demo import (for wpbakery) WordPress TheGem Demo Import (for WPBakery) plugin <= 5.10.5 - Arbitrary Content Deletion vulnerability CVE-2025-62046 6.5 MediumNovember 6, 2025
• codexthemes thegem theme elements (for wpbakery) WordPress TheGem Theme Elements (for WPBakery) plugin <= 5.10.5.1 - Local File Inclusion vulnerability CVE-2025-62045 8.1 HighNovember 6, 2025
• codexthemes thegem theme elements (for wpbakery) WordPress TheGem Theme Elements (for WPBakery) plugin <= 5.10.5.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-62044 6.5 MediumNovember 6, 2025
• codexthemes thegem (elementor) WordPress TheGem (Elementor) theme <= 5.10.5.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-62041 7.1 HighNovember 6, 2025
• codexthemes thegem (elementor) WordPress TheGem (Elementor) theme <= 5.10.5 - Cross Site Scripting (XSS) vulnerability CVE-2025-62012 6.5 MediumNovember 6, 2025
• codexthemes thegem WordPress TheGem theme <= 5.10.5 - Cross Site Scripting (XSS) vulnerability CVE-2025-62011 6.5 MediumNovember 6, 2025
• codexthemes thegem WordPress TheGem Theme <= 5.10.5 - Broken Access Control Vulnerability CVE-2025-60097 5.4 MediumSeptember 26, 2025
• codexthemes thegem (elementor) WordPress TheGem (Elementor) Theme <= 5.10.5 - Broken Access Control Vulnerability CVE-2025-60096 5.4 MediumSeptember 26, 2025
• codexthemes thegem TheGem <= 5.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Theme Options Update CVE-2025-4339 4.3 MediumMay 13, 2025
• codexthemes thegem TheGem <= 5.10.3 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2025-4317 8.8 HighMay 13, 2025
• codexthemes thegem (elementor), thegem (wpbakery) +1 more Auth. Stored Cross-Site Scripting (XSS) vulnerability in TheGem theme by CodexThemes CVE-2023-32237 5.4 MediumMarch 26, 2024
• codex-themes thegem, codexthemes thegem - creative multi-purpose & woocommerce wordpress theme +1 more WordPress TheGem Theme <= 5.9.1 is vulnerable to Cross Site Scripting (XSS) CVE-2023-50892 7.1 HighDecember 29, 2023