Thegem Elementor (Codexthemes) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-08-20. Vendor: Codexthemes.

CVEs of Thegem Elementor

• CVE-2026-66609 - CVSS 9.3 (critical), 2026-08-20: Unauthenticated SQL Injection in TheGem (Elementor) <= 5.12.3 versions.
• CVE-2023-32238 - CVSS 5.4 (medium), 2025-12-30: Vulnerability in CodexThemes TheGem (Elementor), CodexThemes TheGem (WPBakery).This issue affects TheGem (Elementor): from n/a before 5.8.1.1; TheGem…
• CVE-2025-62041 - CVSS 7.1 (high), 2025-11-06: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem (Elementor) thegem-elementor.This…
• CVE-2025-62012 - CVSS 6.5 (medium), 2025-11-06: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem (Elementor) thegem-elementor.This…
• CVE-2025-60096 - CVSS 5.4 (medium), 2025-09-26: Missing Authorization vulnerability in CodexThemes TheGem (Elementor) thegem-elementor allows Exploiting Incorrectly Configured Access Control Security…
• CVE-2023-32237 - CVSS 5.4 (medium), 2024-03-26: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem (Elementor), CodexThemes TheGem…