Cross-site Scripting Vulnerability in CodexThemes TheGem Theme Elements for WPBakery

CVE-2025-69360

What is CVE-2025-69360?

TheGem Theme Elements for WPBakery is affected by a Cross-site Scripting vulnerability that arises from improper handling of input during web page generation. This flaw allows attackers to execute arbitrary JavaScript in the context of users' browsers, leading to potential data theft and session hijacking. The issue is present in TheGem Theme Elements version 5.11.0 and below, making users susceptible to DOM-based XSS attacks. Website administrators using this theme are advised to apply necessary security patches to mitigate the risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References