Access Control

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. TheGem <= 5.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Theme Options UpdateCVE-2025-4339CodexThemes · CVSS 4.3 · 0.4% likely

   CWE-862

2. WordPress TheGem Demo Import (for WPBakery) plugin <= 5.10.5 - Arbitrary Content Deletion vulnerabilityCVE-2025-62046CodexThemes · CVSS 6.5 · 0.4% likely

   CWE-862

3. WordPress TheGem Theme <= 5.10.5 - Broken Access Control VulnerabilityCVE-2025-60097CodexThemes · CVSS 5.4 · 0.3% likely

   CWE-862

4. WordPress TheGem (Elementor) Theme <= 5.10.5 - Broken Access Control VulnerabilityCVE-2025-60096CodexThemes · CVSS 5.4 · 0.3% likely

   CWE-862

5. WordPress TheGem theme < 5.8.1.1 - Broken Access Control vulnerabilityCVE-2023-32238CodexThemes · CVSS 5.4 · 0.2% likely

   CWE-284

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.