Skip to content
OpenAdvisories

Vendor

CodexThemes

22 known vulnerabilities.

Products

TheGem Theme Elements (for Elementor) 6 TheGem (Elementor) 6 TheGem 5 TheGem Theme Elements (for WPBakery) 3 TheGem (WPBakery) 2 TheGem Demo Import (for WPBakery) 1 TheGem - Creative Multi-Purpose & WooCommerce WordPress Theme 1
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-65480

    WordPress TheGem theme < 5.12.1.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem allows DOM-Based XSS. This issue affects TheGem: from n/a before 5.12.1.1.

    CodexThemes TheGem
  • Medium 6.5
    CVE-2026-42410

    WordPress TheGem theme Elements (for Elementor) plugin < 5.12.1.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) allows DOM-Based XSS.This issue affects TheGem Theme Elements (for Elementor): from n/a before 5.12.1.1.

    CodexThemes TheGem Theme Elements (for Elementor)
  • Medium 6.5
    CVE-2025-69360

    WordPress TheGem Theme Elements (for WPBakery) plugin <= 5.11.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for WPBakery) thegem-elements allows DOM-Based XSS.This issue affects TheGem Theme Elements (for WPBakery): from n/a throu…

    CodexThemes TheGem Theme Elements (for WPBakery)
  • Medium 6.5
    CVE-2025-69357

    WordPress TheGem Theme Elements (for Elementor) plugin <= 5.11.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) thegem-elements-elementor allows Stored XSS.This issue affects TheGem Theme Elements (for Elementor): from …

    CodexThemes TheGem Theme Elements (for Elementor)
  • Medium 5.4
    CVE-2023-32238

    WordPress TheGem theme < 5.8.1.1 - Broken Access Control vulnerability

    Vulnerability in CodexThemes TheGem (Elementor), CodexThemes TheGem (WPBakery).This issue affects TheGem (Elementor): from n/a before 5.8.1.1; TheGem (WPBakery): from n/a before 5.8.1.1.

    CodexThemes TheGem (Elementor) TheGem (WPBakery)
  • Medium 6.5
    CVE-2025-68559

    WordPress TheGem Theme Elements (for Elementor) plugin <= 5.10.5.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) thegem-elements-elementor.This issue affects TheGem Theme Elements (for Elementor): from n/a through <= 5.1…

    CodexThemes TheGem Theme Elements (for Elementor)
  • Medium 6.5
    CVE-2025-62046

    WordPress TheGem Demo Import (for WPBakery) plugin <= 5.10.5 - Arbitrary Content Deletion vulnerability

    Missing Authorization vulnerability in CodexThemes TheGem Demo Import (for WPBakery) thegem-importer.This issue affects TheGem Demo Import (for WPBakery): from n/a through <= 5.10.5.

    CodexThemes TheGem Demo Import (for WPBakery)
  • Medium 6.5
    CVE-2025-62044

    WordPress TheGem Theme Elements (for WPBakery) plugin <= 5.10.5.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for WPBakery) thegem-elements.This issue affects TheGem Theme Elements (for WPBakery): from n/a through <= 5.10.5.1.

    CodexThemes TheGem Theme Elements (for WPBakery)
  • Medium 6.5
    CVE-2025-62012

    WordPress TheGem (Elementor) theme <= 5.10.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem (Elementor) thegem-elementor.This issue affects TheGem (Elementor): from n/a through <= 5.10.5.

    CodexThemes TheGem (Elementor)
  • Medium 6.5
    CVE-2025-62011

    WordPress TheGem theme <= 5.10.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem thegem.This issue affects TheGem: from n/a through <= 5.10.5.

    CodexThemes TheGem
  • Medium 5.4
    CVE-2025-60097

    WordPress TheGem Theme <= 5.10.5 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in CodexThemes TheGem thegem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TheGem: from n/a through <= 5.10.5.

    CodexThemes TheGem
  • Medium 5.4
    CVE-2025-60096

    WordPress TheGem (Elementor) Theme <= 5.10.5 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in CodexThemes TheGem (Elementor) thegem-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TheGem (Elementor): from n/a through <= 5.10.5.

    CodexThemes TheGem (Elementor)
  • Medium 4.3
    CVE-2025-4339

    TheGem <= 5.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Theme Options Update

    The TheGem theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxApi() function in all versions up to, and including, 5.10.3. This makes it possible for authenticated attackers, with Subscriber-lev…

    CodexThemes TheGem Web / CMS
  • Medium 5.4
    CVE-2023-32237

    Auth. Stored Cross-Site Scripting (XSS) vulnerability in TheGem theme by CodexThemes

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem (Elementor), CodexThemes TheGem (WPBakery) allows Stored XSS.This issue affects TheGem (Elementor): from n/a before 5.8.1.1; TheGem (WPBak…

    CodexThemes TheGem (Elementor) TheGem (WPBakery)