Thegem

thegem

Vulnerabilities:

5

Last Updated:

n/a

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2025-09-26
Title
TheGem < 5.10.5.1 - Missing Authorization
Fixed in
Fixed in 5.10.5.1
CVSS
4.3 (medium)
Published
2025-09-03
Title
TheGem < 5.10.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Fixed in
Fixed in 5.10.5.1
CVSS
6.4 (medium)
Published
2025-05-12
Title
TheGem < 5.10.3.1 - Authenticated (Subscriber+) Arbitrary File Upload
Fixed in
Fixed in 5.10.3.1
CVSS
8.8 (high)
Published
2025-05-12
Title
TheGem < 5.10.3.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Theme Options Update
Fixed in
Fixed in 5.10.3.1
CVSS
4.3 (medium)
Published
2023-12-26
Title
TheGem < 5.9.2 - Reflected Cross-Site Scripting
Fixed in
Fixed in 5.9.2
CVSS
6.1 (medium)