Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2571▼ 296 respecto a la semana anterior

Críticas / altas1355▲ 107 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior

22 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-66609	Aplazada	Crítica (9.3)	0.40%	—	Codex-themes Thegem^AI	20/8/2026	20/8/2026	Unauthenticated SQL Injection in TheGem (Elementor) <= 5.12.3 versions.
CVE-2026-65480	Aplazada	Media (6.5)	0.22%	—	Codex-themes Thegem^AI	23/7/2026	14/8/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem allows DOM-Based XSS. This issue affects TheGem: from n/a before 5.12.1.1.
CVE-2026-57804	Aplazada	Alta (7.5)	0.51%	—	Codexthemes Thegem Theme Elements^AI	13/7/2026	14/8/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) allows PHP Local File Inclusion. This issue affects TheGem Theme Elements (for Elementor): from n/a before 5.12.1.1.
CVE-2026-42410	Aplazada	Media (6.5)	0.22%	—	Codexthemes Thegem Theme Elements^AI	27/4/2026	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) allows DOM-Based XSS.This issue affects TheGem Theme Elements (for Elementor): from n/a before 5.12.1.1.
CVE-2025-69360	Aplazada	Media (6.5)	0.16%	—	Codexthemes Thegem Theme Elements^AI	6/1/2026	30/9/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for WPBakery) thegem-elements allows DOM-Based XSS.This issue affects TheGem Theme Elements (for WPBakery): from n/a through <= 5.11.0.
CVE-2025-69357	Aplazada	Media (6.5)	0.16%	—	Codexthemes Thegem Theme Elements FOR Elementor^AI	6/1/2026	30/9/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) thegem-elements-elementor allows Stored XSS.This issue affects TheGem Theme Elements (for Elementor): from n/a through <= 5.11.0.
CVE-2025-69356	Aplazada	Alta (7.5)	0.39%	—	Codexthemes Thegem Theme Elements Elementor^AI	6/1/2026	30/9/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) thegem-elements-elementor allows PHP Local File Inclusion.This issue affects TheGem Theme Elements (for Elementor): from n/a through <= 5.11.0.
CVE-2023-32238	Aplazada	Media (5.4)	0.20%	—	Codexthemes Thegem Elementor^AI Codexthemes Thegem Wpbakery^AI	30/12/2025	17/6/2026	Vulnerability in CodexThemes TheGem (Elementor), CodexThemes TheGem (WPBakery).This issue affects TheGem (Elementor): from n/a before 5.8.1.1; TheGem (WPBakery): from n/a before 5.8.1.1.
CVE-2025-68560	Aplazada	Alta (7.5)	0.38%	—	Codexthemes Thegem Elements Elementor^AI	23/12/2025	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) thegem-elements-elementor.This issue affects TheGem Theme Elements (for Elementor): from n/a through <= 5.10.5.1.
CVE-2025-68559	Aplazada	Media (6.5)	0.16%	—	Codexthemes Thegem Theme Elements FOR Elementor^AI	23/12/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) thegem-elements-elementor.This issue affects TheGem Theme Elements (for Elementor): from n/a through <= 5.10.5.1.
CVE-2025-62045	Aplazada	Alta (8.1)	0.50%	—	Codexthemes Thegem Theme Elements^AI	6/11/2025	17/6/2026	Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Elements (for WPBakery) thegem-elements.This issue affects TheGem Theme Elements (for WPBakery): from n/a through <= 5.10.5.1.
CVE-2025-62044	Aplazada	Media (6.5)	0.25%	—	Codexthemes Thegem Theme Elements^AI	6/11/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for WPBakery) thegem-elements.This issue affects TheGem Theme Elements (for WPBakery): from n/a through <= 5.10.5.1.
CVE-2025-62041	Aplazada	Alta (7.1)	0.28%	—	Codex-themes Thegem^AI	6/11/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem (Elementor) thegem-elementor.This issue affects TheGem (Elementor): from n/a through <= 5.10.5.1.
CVE-2025-62012	Aplazada	Media (6.5)	0.20%	—	Codexthemes Thegem Elementor^AI	6/11/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem (Elementor) thegem-elementor.This issue affects TheGem (Elementor): from n/a through <= 5.10.5.
CVE-2025-62011	Aplazada	Media (6.5)	0.20%	—	Codex-themes Thegem^AI	6/11/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem thegem.This issue affects TheGem: from n/a through <= 5.10.5.
CVE-2025-62046	Aplazada	Media (6.5)	0.34%	—	Codexthemes Thegem Demo Import^AI	6/11/2025	30/9/2026	Missing Authorization vulnerability in CodexThemes TheGem Demo Import (for WPBakery) thegem-importer.This issue affects TheGem Demo Import (for WPBakery): from n/a through <= 5.10.5.
CVE-2025-60097	Aplazada	Media (5.4)	0.27%	—	Codex-themes Thegem^AI	26/9/2025	17/6/2026	Missing Authorization vulnerability in CodexThemes TheGem thegem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TheGem: from n/a through <= 5.10.5.
CVE-2025-60096	Aplazada	Media (5.4)	0.27%	—	Codex-themes Thegem^AI	26/9/2025	17/6/2026	Missing Authorization vulnerability in CodexThemes TheGem (Elementor) thegem-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TheGem (Elementor): from n/a through <= 5.10.5.
CVE-2025-4339	Aplazada	Media (4.3)	0.42%	—	Codex-themes Thegem^AI	13/5/2025	17/6/2026	The TheGem theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxApi() function in all versions up to, and including, 5.10.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary theme options.
CVE-2025-4317	Aplazada	Alta (8.8)	1.1%	—	Codex-themes Thegem^AI	13/5/2025	17/6/2026	The TheGem theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the thegem_get_logo_url() function in all versions up to, and including, 5.10.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the…
CVE-2023-32237	Aplazada	Media (5.4)	0.36%	—	Codexthemes Thegem Elementor^AI Codexthemes Thegem Wpbakery^AI	26/3/2024	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem (Elementor), CodexThemes TheGem (WPBakery) allows Stored XSS.This issue affects TheGem (Elementor): from n/a before 5.8.1.1; TheGem (WPBakery): from n/a before 5.8.1.1.
CVE-2023-50892	Modificada	Media (6.1)	0.34%	—	Codex-themes Thegem	29/12/2023	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem - Creative Multi-Purpose & WooCommerce WordPress Theme allows Reflected XSS.This issue affects TheGem - Creative Multi-Purpose & WooCommerce WordPress Theme: from n/a through 5.9.1.