Description
Unauthenticated SQL Injection in TheGem (Elementor) <= 5.12.3 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CodexThemes | TheGem (Elementor) | ≤ 5.12.3 | — |
Critical · 9.3
CVE-2026-66609
EUVD-2026-63295GHSA-h6f6-6rqr-c7wx
WordPress TheGem (Elementor) theme <= 5.12.3 - SQL Injection vulnerability
Published Aug 20, 2026 · Updated Aug 20, 2026 · Assigned by Patchstack