PT-2025-53808 · Codexthemes · Thegem

Published 2025-12-29 · Updated 2025-12-30 · CVE-2023-32238

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions CodexThemes TheGem (Elementor) versions prior to 5.8.1.1 CodexThemes TheGem (WPBakery) versions prior to 5.8.1.1

Description A security issue exists in CodexThemes TheGem with both the Elementor and WPBakery page builder integrations. The vulnerability affects versions prior to 5.8.1.1 in both integrations.

Recommendations Update CodexThemes TheGem (Elementor) to version 5.8.1.1 or later. Update CodexThemes TheGem (WPBakery) to version 5.8.1.1 or later.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2023-32238

Affected Products

Thegem

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-32238 · Security Note
• https://twitter.com/CVEnew/status/2005784453671530615 · Twitter Post
• https://vdp.patchstack.com/database/wordpress/theme/thegem-elementor/vulnerability/wordpress-thegem-elementor-theme-5-7-2-broken-access-control-vulnerability?_s_id=cve · Note
• https://twitter.com/VulmonFeeds/status/2005915945047335387 · Twitter Post
• https://t.me/CVEtracker/40890 · Telegram Post