CodexThemes vulnerabilities and threats

18 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.3	EPSS 0.4%	CVE-2026-66609TheGem (Elementor) (WordPress plugin) · SQL Injection Critical9.3EPSS 0.4%2026-08-20CVE Database V5CVE-2026-66609 CVE-2026-66609 is a critical unauthenticated SQL Injection vulnerability affecting TheGem (Elementor) plugin versions up to and including 5.12.3. This flaw allows remote attackers to inject malicious SQL commands without authentication, potentially leading to high confidentiality impact and limited availability impact. No official patch or remediation details are provided in the input data. EPSS 0.4%Vulnerability CodexThemes CWE-89 #ghsa-h6f6-6rqr-c7wx	CVE Database V5	2026-08-20
Medium	6.5	EPSS 0.2%	CVE-2026-65480TheGem (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-07-23CVE Database V5CVE-2026-65480 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem allows DOM-Based XSS. This issue affects TheGem: from n/a before 5.12.1.1. EPSS 0.2%Vulnerability CodexThemes CWE-79	CVE Database V5	2026-07-23
High	7.5	EPSS 0.5%	CVE-2026-57804CodexThemes TheGem Theme Elements (for Elementor) · PHP Remote File Inclusion High7.5EPSS 0.5%2026-07-13CVE Database V5CVE-2026-57804 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) allows PHP Local File Inclusion. This issue affects TheGem Theme Elements (for Elementor): from n/a before 5.12.1.1. EPSS 0.5%Vulnerability CWE-98	CVE Database V5	2026-07-13
Medium	6.5	EPSS 0.1%	CVE-2026-42410CodexThemes TheGem Theme Elements (for Elementor) · Cross-site Scripting Medium6.5EPSS 0.1%2026-04-27CVE Database V5CVE-2026-42410 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) allows DOM-Based XSS.This issue affects TheGem Theme Elements (for Elementor): from n/a before 5.12.1.1. EPSS 0.1%Vulnerability CWE-79	CVE Database V5	2026-04-27
Medium	6.5	EPSS 0.2%	CVE-2025-69360CodexThemes TheGem Theme Elements (for WPBakery) · Cross-site Scripting Medium6.5EPSS 0.2%2026-01-06CVE Database V5CVE-2025-69360 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for WPBakery) thegem-elements allows DOM-Based XSS.This issue affects TheGem Theme Elements (for WPBakery): from n/a through <= 5.11.0. EPSS 0.2%Vulnerability	CVE Database V5	2026-01-06
Medium	6.5	EPSS 0.2%	CVE-2025-69357CodexThemes TheGem Theme Elements (for Elementor) · Cross-site Scripting Medium6.5EPSS 0.2%2026-01-06CVE Database V5CVE-2025-69357 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) thegem-elements-elementor allows Stored XSS.This issue affects TheGem Theme Elements (for Elementor): from n/a through <= 5.11.0. EPSS 0.2%Vulnerability	CVE Database V5	2026-01-06
High	7.5	EPSS 0.4%	CVE-2025-69356CodexThemes TheGem Theme Elements (for Elementor) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High7.5EPSS 0.4%2026-01-06CVE Database V5CVE-2025-69356 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) thegem-elements-elementor allows PHP Local File Inclusion.This issue affects TheGem Theme Elements (for Elementor): from n/a through <= 5.11.0. EPSS 0.4%Vulnerability	CVE Database V5	2026-01-06
Medium	5.4	EPSS 0.2%	CVE-2023-32238TheGem (Elementor) (WordPress plugin) · Improper Access Control Medium5.4EPSS 0.2%2025-12-29CVE Database V5CVE-2023-32238 Vulnerability in CodexThemes TheGem (Elementor), CodexThemes TheGem (WPBakery).This issue affects TheGem (Elementor): from n/a before 5.8.1.1; TheGem (WPBakery): from n/a before 5.8.1.1. EPSS 0.2%Vulnerability CodexThemes CWE-284	CVE Database V5	2025-12-29
Medium	6.5	EPSS 0.2%	CVE-2025-68559CodexThemes TheGem Theme Elements (for Elementor) · Cross-site Scripting Medium6.5EPSS 0.2%2025-12-23CVE Database V5CVE-2025-68559 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) thegem-elements-elementor.This issue affects TheGem Theme Elements (for Elementor): from n/a through <= 5.10.5.1. EPSS 0.2%Vulnerability	CVE Database V5	2025-12-23
High	7.5	EPSS 0.4%	CVE-2025-68560CodexThemes TheGem Theme Elements (for Elementor) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High7.5EPSS 0.4%2025-12-23CVE Database V5CVE-2025-68560 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) thegem-elements-elementor.This issue affects TheGem Theme Elements (for Elementor): from n/a through <= 5.10.5.1. EPSS 0.4%Vulnerability	CVE Database V5	2025-12-23
Medium	6.5	EPSS 0.4%	CVE-2025-62046TheGem Demo Import (for WPBakery) (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.4%2025-11-06CVE Database V5CVE-2025-62046 Missing Authorization vulnerability in CodexThemes TheGem Demo Import (for WPBakery) thegem-importer.This issue affects TheGem Demo Import (for WPBakery): from n/a through <= 5.10.5. EPSS 0.4%Vulnerability CodexThemes	CVE Database V5	2025-11-06
High	8.1	EPSS 0.5%	CVE-2025-62045CodexThemes TheGem Theme Elements (for WPBakery) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.5%2025-11-06CVE Database V5CVE-2025-62045 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Elements (for WPBakery) thegem-elements.This issue affects TheGem Theme Elements (for WPBakery): from n/a through <= 5.10.5.1. EPSS 0.5%Vulnerability	CVE Database V5	2025-11-06
Medium	6.5	EPSS 0.3%	CVE-2025-62044CodexThemes TheGem Theme Elements (for WPBakery) · Cross-site Scripting Medium6.5EPSS 0.3%2025-11-06CVE Database V5CVE-2025-62044 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for WPBakery) thegem-elements.This issue affects TheGem Theme Elements (for WPBakery): from n/a through <= 5.10.5.1. EPSS 0.3%Vulnerability	CVE Database V5	2025-11-06
High	7.1	EPSS 0.3%	CVE-2025-62041TheGem (Elementor) (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2025-11-06CVE Database V5CVE-2025-62041 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem (Elementor) thegem-elementor.This issue affects TheGem (Elementor): from n/a through <= 5.10.5.1. EPSS 0.3%Vulnerability CodexThemes	CVE Database V5	2025-11-06
Medium	6.5	EPSS 0.2%	CVE-2025-62012TheGem (Elementor) (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-11-06CVE Database V5CVE-2025-62012 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem (Elementor) thegem-elementor.This issue affects TheGem (Elementor): from n/a through <= 5.10.5. EPSS 0.2%Vulnerability CodexThemes	CVE Database V5	2025-11-06
Medium	6.5	EPSS 0.2%	CVE-2025-62011TheGem (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-11-06CVE Database V5CVE-2025-62011 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem thegem.This issue affects TheGem: from n/a through <= 5.10.5. EPSS 0.2%Vulnerability CodexThemes	CVE Database V5	2025-11-06
Medium	5.4	EPSS 0.3%	CVE-2025-60097TheGem (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.3%2025-09-26CVE Database V5CVE-2025-60097 Missing Authorization vulnerability in CodexThemes TheGem thegem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TheGem: from n/a through <= 5.10.5. EPSS 0.3%Vulnerability CodexThemes CWE-862	CVE Database V5	2025-09-26
Medium	5.4	EPSS 0.3%	CVE-2025-60096TheGem (Elementor) (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.3%2025-09-26CVE Database V5CVE-2025-60096 Missing Authorization vulnerability in CodexThemes TheGem (Elementor) thegem-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TheGem (Elementor): from n/a through <= 5.10.5. EPSS 0.3%Vulnerability CodexThemes CWE-862	CVE Database V5	2025-09-26

Page 1 of 1