CVE-2026-65480

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodexThemes TheGem allows DOM-Based XSS. This issue affects TheGem: from n/a before 5.12.1.1...

PT-2025-39544

Name of the Vulnerable Software and Affected Versions CodexThemes TheGem versions through 5.10.5 Description An authorization issue exists in CodexThemes TheGem, allowing exploitation of incorrectly configured access control security levels. Recommendations Update CodexThemes TheGem to a version...

WordPress TheGem plugin <= 5.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Theme Options Update vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Theme Options Update vulnerability discovered by Foxyyy in WordPress Theme TheGem versions = 5.10.3...