Skip to content
OpenAdvisories

Product · CodexThemes

TheGem (Elementor)

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.4
    CVE-2023-32238

    WordPress TheGem theme < 5.8.1.1 - Broken Access Control vulnerability

    Vulnerability in CodexThemes TheGem (Elementor), CodexThemes TheGem (WPBakery).This issue affects TheGem (Elementor): from n/a before 5.8.1.1; TheGem (WPBakery): from n/a before 5.8.1.1.

    CodexThemes TheGem (Elementor) TheGem (WPBakery)
  • Medium 6.5
    CVE-2025-62012

    WordPress TheGem (Elementor) theme <= 5.10.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem (Elementor) thegem-elementor.This issue affects TheGem (Elementor): from n/a through <= 5.10.5.

    CodexThemes TheGem (Elementor)
  • Medium 5.4
    CVE-2025-60096

    WordPress TheGem (Elementor) Theme <= 5.10.5 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in CodexThemes TheGem (Elementor) thegem-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TheGem (Elementor): from n/a through <= 5.10.5.

    CodexThemes TheGem (Elementor)
  • Medium 5.4
    CVE-2023-32237

    Auth. Stored Cross-Site Scripting (XSS) vulnerability in TheGem theme by CodexThemes

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem (Elementor), CodexThemes TheGem (WPBakery) allows Stored XSS.This issue affects TheGem (Elementor): from n/a before 5.8.1.1; TheGem (WPBak…

    CodexThemes TheGem (Elementor) TheGem (WPBakery)