Skip to content
OpenAdvisories

Product · CodexThemes

TheGem

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-65480

    WordPress TheGem theme < 5.12.1.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem allows DOM-Based XSS. This issue affects TheGem: from n/a before 5.12.1.1.

    CodexThemes TheGem
  • Medium 6.5
    CVE-2025-62011

    WordPress TheGem theme <= 5.10.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem thegem.This issue affects TheGem: from n/a through <= 5.10.5.

    CodexThemes TheGem
  • Medium 5.4
    CVE-2025-60097

    WordPress TheGem Theme <= 5.10.5 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in CodexThemes TheGem thegem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TheGem: from n/a through <= 5.10.5.

    CodexThemes TheGem
  • Medium 4.3
    CVE-2025-4339

    TheGem <= 5.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Theme Options Update

    The TheGem theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxApi() function in all versions up to, and including, 5.10.3. This makes it possible for authenticated attackers, with Subscriber-lev…

    CodexThemes TheGem Web / CMS