TheGem

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. TheGem <= 5.10.3 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2025-4317CodexThemes · CVSS 8.8 · 1.2% likely

   CWE-434

2. TheGem <= 5.10.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Theme Options UpdateCVE-2025-4339CodexThemes · CVSS 4.3 · 0.4% likely

   CWE-862

3. WordPress TheGem Theme <= 5.10.5 - Broken Access Control VulnerabilityCVE-2025-60097CodexThemes · CVSS 5.4 · 0.3% likely

   CWE-862

4. WordPress TheGem theme < 5.12.1.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-65480CodexThemes · CVSS 6.5 · 0.2% likely

   CWE-79

5. WordPress TheGem theme <= 5.10.5 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-62011CodexThemes · CVSS 6.5 · 0.2% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.