Medium 6.5
2025-11-06< 5.10.5.1
CVE-2025-62011
Minimum safe version
5.10.5.1
Update to 5.10.5.1 or later to address 7 fixable vulnerabilities
CVE-2025-62011
CVE-2025-60097
TheGem <= 5.10.3 - Authenticated (Subscriber+) Arbitrary File Upload
WordPress TheGem Theme <= 5.10.3 is vulnerable to Broken Access Control
WordPress TheGem Theme <= 5.9.1 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-32237
CVE-2023-32238