File and Path Handling

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. TheGem <= 5.10.3 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2025-4317CodexThemes · CVSS 8.8 · 1.2% likely

   CWE-434

2. WordPress TheGem Theme Elements (for WPBakery) plugin <= 5.10.5.1 - Local File Inclusion vulnerabilityCVE-2025-62045CodexThemes · CVSS 8.1 · 0.5% likely

   CWE-98

3. WordPress TheGem Theme Elements (for Elementor) plugin < 5.12.1.1 - Local File Inclusion vulnerabilityCVE-2026-57804CodexThemes · CVSS 7.5 · 0.5% likely

   CWE-98

4. WordPress TheGem Theme Elements (for Elementor) plugin <= 5.11.0 - Local File Inclusion vulnerabilityCVE-2025-69356CodexThemes · CVSS 7.5 · 0.4% likely

   CWE-98

5. WordPress TheGem Theme Elements (for Elementor) plugin <= 5.10.5.1 - Local File Inclusion vulnerabilityCVE-2025-68560CodexThemes · CVSS 7.5 · 0.4% likely

   CWE-98

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.