199 matches found
PT-2025-39543
Name of the Vulnerable Software and Affected Versions CodexThemes TheGem Elementor versions through 5.10.5 Description A security issue exists in CodexThemes TheGem Elementor related to incorrectly configured access control security levels, potentially allowing unauthorized access. Recommendation...
WordPress TheGem (Elementor) theme <= 5.10.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by ? in WordPress Theme TheGem Elementor versions = 5.10.5...
WordPress TheGem theme <= 5.10.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by ? in WordPress Theme TheGem versions = 5.10.5...
CVE-2023-50892
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodexThemes TheGem - Creative Multi-Purpose & WooCommerce WordPress Theme allows Reflected XSS.This issue affects TheGem - Creative Multi-Purpose & WooCommerce WordPress Theme: from n/a through 5.9...
CVE-2023-32237
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodexThemes TheGem Elementor, CodexThemes TheGem WPBakery allows Stored XSS.This issue affects TheGem Elementor: from n/a before 5.8.1.1; TheGem WPBakery: from n/a before 5.8.1.1...
CVE-2025-4339
The TheGem theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxApi function in all versions up to, and including, 5.10.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary...
CVE-2025-4317
The TheGem theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the thegemgetlogourl function in all versions up to, and including, 5.10.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary...
CVE-2025-4317
The TheGem theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the thegemgetlogourl function in all versions up to, and including, 5.10.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary...
CVE-2025-4339
The TheGem theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxApi function in all versions up to, and including, 5.10.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary...
CVE-2025-4339 TheGem <= 5.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Theme Options Update
The TheGem theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxApi function in all versions up to, and including, 5.10.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary...
CVE-2025-4339 TheGem <= 5.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Theme Options Update
The TheGem theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxApi function in all versions up to, and including, 5.10.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary...
CVE-2025-4339
CVE-2025-4339 (TheGem theme) : A missing capability check in TheGem’s ajaxApi() allows authenticated users with Subscriber+ permissions to update arbitrary theme options in all versions ≤ 5.10.3. Wordfence reports the vulnerability enabling data modification via the save action, with nonce protec...
CVE-2025-4317 TheGem <= 5.10.3 - Authenticated (Subscriber+) Arbitrary File Upload
The TheGem theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the thegemgetlogourl function in all versions up to, and including, 5.10.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary...
CVE-2025-4317
TheGem WordPress theme (TheGem
CVE-2025-4317 TheGem <= 5.10.3 - Authenticated (Subscriber+) Arbitrary File Upload
The TheGem theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the thegemgetlogourl function in all versions up to, and including, 5.10.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary...
PT-2025-20835 · WordPress · Thegem
Name of the Vulnerable Software and Affected Versions: TheGem theme for WordPress versions up to, and including, 5.10.3 Description: The issue arises from missing file type validation in the thegem get logo url function, allowing authenticated attackers with Subscriber-level access or higher to...
WordPress plugin TheGem 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...
PT-2025-20836 · WordPress · Thegem
Name of the Vulnerable Software and Affected Versions: TheGem theme for WordPress versions up to and including 5.10.3 Description: The issue concerns unauthorized modification of data due to a missing capability check in the ajaxApi function. This allows authenticated attackers with...
WordPress plugin TheGem 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress TheGem plugin <= 5.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Theme Options Update vulnerability
Missing Authorization to Authenticated Subscriber+ Arbitrary Theme Options Update vulnerability discovered by Foxyyy in WordPress Theme TheGem versions = 5.10.3...