Skip to content
OpenAdvisories

Vendor

CodexThemes

22 known vulnerabilities.

CodexThemes at a glance

Last 12 months
10
Critical · all time
1
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 3 vulnerabilities Dec 2025 January 2026: 3 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 1 vulnerability May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 2 vulnerabilities August 2026: 1 vulnerability, 1 critical September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202611
Jul 202620
Jun 202600
May 202600
Apr 202610
Mar 202600
Feb 202600
Jan 202630
Dec 202530
Nov 202560
Oct 202500
Sep 202520
Aug 202500
Jul 202500
Jun 202500
May 202520
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

TheGem Theme Elements (for Elementor) 6 TheGem (Elementor) 6 TheGem 5 TheGem Theme Elements (for WPBakery) 3 TheGem (WPBakery) 2 TheGem Demo Import (for WPBakery) 1 TheGem - Creative Multi-Purpose & WooCommerce WordPress Theme 1
All Critical High Medium Low Exploited only Public exploit

22 results · Feed

  • Critical 9.3
    CVE-2026-66609

    WordPress TheGem (Elementor) theme <= 5.12.3 - SQL Injection vulnerability

    Unauthenticated SQL Injection in TheGem (Elementor) <= 5.12.3 versions.

    CodexThemes TheGem (Elementor)
  • Medium 6.5
    CVE-2026-65480

    WordPress TheGem theme < 5.12.1.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem allows DOM-Based XSS. This issue affects TheGem: from n/a before 5.12.1.1.

    CodexThemes TheGem
  • High 7.5
    CVE-2026-57804

    WordPress TheGem Theme Elements (for Elementor) plugin < 5.12.1.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) allows PHP Local File Inclusion. This issue affects TheGem Theme Elements (for Elementor…

    CodexThemes TheGem Theme Elements (for Elementor)
  • Medium 6.5
    CVE-2026-42410

    WordPress TheGem theme Elements (for Elementor) plugin < 5.12.1.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) allows DOM-Based XSS.This issue affects TheGem Theme Elements (for Elementor): from n/a before 5.12.1.1.

    CodexThemes TheGem Theme Elements (for Elementor)
  • Medium 6.5
    CVE-2025-69360

    WordPress TheGem Theme Elements (for WPBakery) plugin <= 5.11.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for WPBakery) thegem-elements allows DOM-Based XSS.This issue affects TheGem Theme Elements (for WPBakery): from n/a throu…

    CodexThemes TheGem Theme Elements (for WPBakery)
  • High 7.5
    CVE-2025-69356

    WordPress TheGem Theme Elements (for Elementor) plugin <= 5.11.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) thegem-elements-elementor allows PHP Local File Inclusion.This issue affects TheGem Them…

    CodexThemes TheGem Theme Elements (for Elementor)
  • Medium 6.5
    CVE-2025-69357

    WordPress TheGem Theme Elements (for Elementor) plugin <= 5.11.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) thegem-elements-elementor allows Stored XSS.This issue affects TheGem Theme Elements (for Elementor): from …

    CodexThemes TheGem Theme Elements (for Elementor)
  • Medium 5.4
    CVE-2023-32238

    WordPress TheGem theme < 5.8.1.1 - Broken Access Control vulnerability

    Vulnerability in CodexThemes TheGem (Elementor), CodexThemes TheGem (WPBakery).This issue affects TheGem (Elementor): from n/a before 5.8.1.1; TheGem (WPBakery): from n/a before 5.8.1.1.

    CodexThemes TheGem (Elementor) TheGem (WPBakery)
  • Medium 6.5
    CVE-2025-68559

    WordPress TheGem Theme Elements (for Elementor) plugin <= 5.10.5.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) thegem-elements-elementor.This issue affects TheGem Theme Elements (for Elementor): from n/a through <= 5.1…

    CodexThemes TheGem Theme Elements (for Elementor)
  • High 7.5
    CVE-2025-68560

    WordPress TheGem Theme Elements (for Elementor) plugin <= 5.10.5.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) thegem-elements-elementor.This issue affects TheGem Theme Elements (for Elementor): from…

    CodexThemes TheGem Theme Elements (for Elementor)
  • Medium 6.5
    CVE-2025-62046

    WordPress TheGem Demo Import (for WPBakery) plugin <= 5.10.5 - Arbitrary Content Deletion vulnerability

    Missing Authorization vulnerability in CodexThemes TheGem Demo Import (for WPBakery) thegem-importer.This issue affects TheGem Demo Import (for WPBakery): from n/a through <= 5.10.5.

    CodexThemes TheGem Demo Import (for WPBakery)
  • High 8.1
    CVE-2025-62045

    WordPress TheGem Theme Elements (for WPBakery) plugin <= 5.10.5.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Elements (for WPBakery) thegem-elements.This issue affects TheGem Theme Elements (for WPBakery): from n/a through…

    CodexThemes TheGem Theme Elements (for WPBakery)
  • Medium 6.5
    CVE-2025-62044

    WordPress TheGem Theme Elements (for WPBakery) plugin <= 5.10.5.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for WPBakery) thegem-elements.This issue affects TheGem Theme Elements (for WPBakery): from n/a through <= 5.10.5.1.

    CodexThemes TheGem Theme Elements (for WPBakery)
  • High 7.1
    CVE-2025-62041

    WordPress TheGem (Elementor) theme <= 5.10.5.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem (Elementor) thegem-elementor.This issue affects TheGem (Elementor): from n/a through <= 5.10.5.1.

    CodexThemes TheGem (Elementor)
  • Medium 6.5
    CVE-2025-62012

    WordPress TheGem (Elementor) theme <= 5.10.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem (Elementor) thegem-elementor.This issue affects TheGem (Elementor): from n/a through <= 5.10.5.

    CodexThemes TheGem (Elementor)
  • Medium 6.5
    CVE-2025-62011

    WordPress TheGem theme <= 5.10.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem thegem.This issue affects TheGem: from n/a through <= 5.10.5.

    CodexThemes TheGem
  • Medium 5.4
    CVE-2025-60097

    WordPress TheGem Theme <= 5.10.5 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in CodexThemes TheGem thegem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TheGem: from n/a through <= 5.10.5.

    CodexThemes TheGem
  • Medium 5.4
    CVE-2025-60096

    WordPress TheGem (Elementor) Theme <= 5.10.5 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in CodexThemes TheGem (Elementor) thegem-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TheGem (Elementor): from n/a through <= 5.10.5.

    CodexThemes TheGem (Elementor)
  • Medium 4.3
    CVE-2025-4339

    TheGem <= 5.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Theme Options Update

    The TheGem theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxApi() function in all versions up to, and including, 5.10.3. This makes it possible for authenticated attackers, with Subscriber-lev…

    CodexThemes TheGem Web / CMS
  • High 8.8
    CVE-2025-4317

    TheGem <= 5.10.3 - Authenticated (Subscriber+) Arbitrary File Upload

    The TheGem theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the thegem_get_logo_url() function in all versions up to, and including, 5.10.3. This makes it possible for authenticated attackers, with Subscriber-…

    CodexThemes TheGem Web / CMS
  • Medium 5.4
    CVE-2023-32237

    Auth. Stored Cross-Site Scripting (XSS) vulnerability in TheGem theme by CodexThemes

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem (Elementor), CodexThemes TheGem (WPBakery) allows Stored XSS.This issue affects TheGem (Elementor): from n/a before 5.8.1.1; TheGem (WPBak…

    CodexThemes TheGem (Elementor) TheGem (WPBakery)
  • High 7.1
    CVE-2023-50892

    WordPress TheGem Theme <= 5.9.1 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem - Creative Multi-Purpose & WooCommerce WordPress Theme allows Reflected XSS.This issue affects TheGem - Creative Multi-Purpose & WooCommer…

    CodexThemes TheGem - Creative Multi-Purpose & WooCommerce WordPress Theme Web / CMS