Cross-site Scripting

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. Auth. Stored Cross-Site Scripting (XSS) vulnerability in TheGem theme by CodexThemesCVE-2023-32237CodexThemes · CVSS 5.4 · 0.4% likely

   CWE-79

2. WordPress TheGem Theme <= 5.9.1 is vulnerable to Cross Site Scripting (XSS)CVE-2023-50892CodexThemes · CVSS 7.1 · 0.3% likely

   CWE-79

3. WordPress TheGem (Elementor) theme <= 5.10.5.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-62041CodexThemes · CVSS 7.1 · 0.3% likely

   CWE-79

4. WordPress TheGem Theme Elements (for WPBakery) plugin <= 5.10.5.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-62044CodexThemes · CVSS 6.5 · 0.3% likely

   CWE-79

5. WordPress TheGem theme < 5.12.1.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-65480CodexThemes · CVSS 6.5 · 0.2% likely

   CWE-79

6. WordPress TheGem (Elementor) theme <= 5.10.5 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-62012CodexThemes · CVSS 6.5 · 0.2% likely

   CWE-79

7. WordPress TheGem theme <= 5.10.5 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-62011CodexThemes · CVSS 6.5 · 0.2% likely

   CWE-79

8. WordPress TheGem Theme Elements (for WPBakery) plugin <= 5.11.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-69360CodexThemes · CVSS 6.5 · 0.2% likely

   CWE-79

9. WordPress TheGem Theme Elements (for Elementor) plugin <= 5.11.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-69357CodexThemes · CVSS 6.5 · 0.2% likely

   CWE-79

10. WordPress TheGem Theme Elements (for Elementor) plugin <= 5.10.5.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-68559CodexThemes · CVSS 6.5 · 0.2% likely

    CWE-79

11. WordPress TheGem theme Elements (for Elementor) plugin < 5.12.1.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-42410CodexThemes · CVSS 6.5 · 0.1% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.