Advisories · Technology

CodexThemes TheGem (Elementor).

Every CVE that names CodexThemes TheGem (Elementor) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-66609 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress TheGem (Elementor) theme <= 5.12.3 - SQL Injection vulnerability
- CodexThemes TheGem (Elementor)
- SQL injection
Not analysed yet 20 Aug 2026
CVE-2023-32238 CVE record

CVSS 5.4 Medium

WordPress TheGem theme < 5.8.1.1 - Broken Access Control vulnerability
- CodexThemes TheGem (Elementor)
- CodexThemes TheGem (WPBakery)
- Broken access control
Not analysed yet 29 Dec 2025
CVE-2025-62041 CVE record

CVSS 7.1 High

WordPress TheGem (Elementor) theme <= 5.10.5.1 - Cross Site Scripting (XSS) vulnerability
- CodexThemes TheGem (Elementor)
- Cross-site scripting (XSS)
Not analysed yet 6 Nov 2025
CVE-2025-62012 CVE record

CVSS 6.5 Medium

WordPress TheGem (Elementor) theme <= 5.10.5 - Cross Site Scripting (XSS) vulnerability
- CodexThemes TheGem (Elementor)
- Cross-site scripting (XSS)
Not analysed yet 6 Nov 2025
CVE-2025-60096 CVE record

CVSS 5.4 Medium

WordPress TheGem (Elementor) Theme <= 5.10.5 - Broken Access Control Vulnerability
- CodexThemes TheGem (Elementor)
- Broken access control
Not analysed yet 26 Sept 2025
CVE-2023-32237 CVE record

CVSS 5.4 Medium

Auth. Stored Cross-Site Scripting (XSS) vulnerability in TheGem theme by CodexThemes
- CodexThemes TheGem (Elementor)
- CodexThemes TheGem (WPBakery)
- Cross-site scripting (XSS)
Not analysed yet 26 Mar 2024