What’s Vulnerable › Products

CodexThemes TheGem (Elementor) vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your CodexThemes TheGem (Elementor) version is affected

Latest CodexThemes TheGem (Elementor) vulnerabilities

• CVE-2026-66609 — WordPress TheGem (Elementor) theme <= 5.12.3 - SQL Injection vulnerability (CVSS 9.3)
• CVE-2023-32238 — WordPress TheGem theme < 5.8.1.1 - Broken Access Control vulnerability (CVSS 5.4)
• CVE-2025-62041 — WordPress TheGem (Elementor) theme <= 5.10.5.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2025-62012 — WordPress TheGem (Elementor) theme <= 5.10.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2025-60096 — WordPress TheGem (Elementor) Theme <= 5.10.5 - Broken Access Control Vulnerability (CVSS 5.4)
• CVE-2023-32237 — Auth. Stored Cross-Site Scripting (XSS) vulnerability in TheGem theme by CodexThemes (CVSS 5.4)