Codexthemes Thegem (Elementor)
6 CVEs affecting Codexthemes Thegem (Elementor). Latest disclosed: 2026-08-20. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-66609 | Critical | 9.3 | 2026-08-20 | Unauthenticated SQL Injection in TheGem (Elementor) <= 5.12.3 versions. |
CVE-2025-62041 | High | 7.1 | 2025-11-06 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem (Elementor) thegem-elementor.This issu… |
CVE-2025-62012 | Medium | 6.5 | 2025-11-06 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem (Elementor) thegem-elementor.This issu… |
CVE-2023-32238 | Medium | 5.4 | 2025-12-30 | Vulnerability in CodexThemes TheGem (Elementor), CodexThemes TheGem (WPBakery).This issue affects TheGem (Elementor): from n/a before 5.8.1.1; TheGem (WPBakery… |
CVE-2025-60096 | Medium | 5.4 | 2025-09-26 | Missing Authorization vulnerability in CodexThemes TheGem (Elementor) thegem-elementor allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2023-32237 | Medium | 5.4 | 2024-03-26 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem (Elementor), CodexThemes TheGem (WPBak… |