TheGem Theme Elements (for Elementor) vulnerabilities

3 known CVE vulnerabilities in TheGem Theme Elements (for Elementor), translated and rated.

CVE-2026-42410Medium
CodexThemes TheGem Theme Elements (for Elementor) contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability allowing DOM-Based XSS. This affects versions before 5.12.1.1.
CVE-2025-69357Medium
The TheGem Theme Elements plugin (for Elementor) is vulnerable to Stored XSS due to improper neutralization of input during web page generation. This issue affects versions from n/a through 5.11.0.
CVE-2025-68559Medium
The TheGem Theme Elements (for Elementor) plugin by CodexThemes contains a cross-site scripting (XSS) vulnerability due to improper neutralization of input during web page generation. The issue affects versions from n/a through 5.10.5.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS