CVE-2025-68559mediumCWE-79

CVE-2025-68559: falha de média gravidade em CodexThemes TheGem Theme Elements (for…

WordPress TheGem Theme Elements (for Elementor) plugin <= 5.10.5.1 - Cross Site Scripting (XSS) vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar TheGem Theme Elements

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 0.2%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) thegem-elements-elementor.This issue affects TheGem Theme Elements (for Elementor): from n/a through <= 5.10.5.1.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Produtos afetados
CodexThemes · TheGem Theme Elements (for Elementor)
CVEs relacionadas — CodexThemes TheGem Theme Elements (for…

No mesmo produto, das mais perigosas para as menos.

CVE-2026-57804HIGHWordPress TheGem Theme Elements (for Elementor) plugin < 5.12.1.1 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2025-69356HIGHWordPress TheGem Theme Elements (for Elementor) plugin <= 5.11.0 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2025-68560HIGHWordPress TheGem Theme Elements (for Elementor) plugin <= 5.10.5.1 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2025-69357MEDIUMWordPress TheGem Theme Elements (for Elementor) plugin <= 5.11.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-42410MEDIUMWordPress TheGem theme Elements (for Elementor) plugin < 5.12.1.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%