Skip to content
OpenAdvisories

Vendor

CodexThemes

22 known vulnerabilities.

Products

TheGem Theme Elements (for Elementor) 6 TheGem (Elementor) 6 TheGem 5 TheGem Theme Elements (for WPBakery) 3 TheGem (WPBakery) 2 TheGem Demo Import (for WPBakery) 1 TheGem - Creative Multi-Purpose & WooCommerce WordPress Theme 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.5
    CVE-2026-57804

    WordPress TheGem Theme Elements (for Elementor) plugin < 5.12.1.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) allows PHP Local File Inclusion. This issue affects TheGem Theme Elements (for Elementor…

    CodexThemes TheGem Theme Elements (for Elementor)
  • High 7.5
    CVE-2025-69356

    WordPress TheGem Theme Elements (for Elementor) plugin <= 5.11.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) thegem-elements-elementor allows PHP Local File Inclusion.This issue affects TheGem Them…

    CodexThemes TheGem Theme Elements (for Elementor)
  • High 7.5
    CVE-2025-68560

    WordPress TheGem Theme Elements (for Elementor) plugin <= 5.10.5.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) thegem-elements-elementor.This issue affects TheGem Theme Elements (for Elementor): from…

    CodexThemes TheGem Theme Elements (for Elementor)
  • High 8.1
    CVE-2025-62045

    WordPress TheGem Theme Elements (for WPBakery) plugin <= 5.10.5.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Elements (for WPBakery) thegem-elements.This issue affects TheGem Theme Elements (for WPBakery): from n/a through…

    CodexThemes TheGem Theme Elements (for WPBakery)
  • High 7.1
    CVE-2025-62041

    WordPress TheGem (Elementor) theme <= 5.10.5.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem (Elementor) thegem-elementor.This issue affects TheGem (Elementor): from n/a through <= 5.10.5.1.

    CodexThemes TheGem (Elementor)
  • High 8.8
    CVE-2025-4317

    TheGem <= 5.10.3 - Authenticated (Subscriber+) Arbitrary File Upload

    The TheGem theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the thegem_get_logo_url() function in all versions up to, and including, 5.10.3. This makes it possible for authenticated attackers, with Subscriber-…

    CodexThemes TheGem Web / CMS
  • High 7.1
    CVE-2023-50892

    WordPress TheGem Theme <= 5.9.1 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem - Creative Multi-Purpose & WooCommerce WordPress Theme allows Reflected XSS.This issue affects TheGem - Creative Multi-Purpose & WooCommer…

    CodexThemes TheGem - Creative Multi-Purpose & WooCommerce WordPress Theme Web / CMS