Vulnerabilities

Report: CVE-2026-42410 - WordPress TheGem theme Elements (for Elementor) plugin < 5.12.1.1 - Cross Site S

2026-04-27 0 views admin

CVE ID :CVE-2026-42410 Published : April 27, 2026, 10:41 a.m. | 1 hour, 10 minutes ago Description :Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) allows DOM-Based XSS.This issue affects TheGem Theme Elements (for Elementor): from n/a before 5.12.1.1. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

CVE ID

CVE-2026-42410

Severity

MEDIUM

Published

April 27, 2026

Impact: XSS

🏷️ Tags

report42410wordpressthegemthemeelementselementorplugincrosscve

InfinitSec - Latest Cybersecurity, Technology & Gaming News

Report: CVE-2026-42410 - WordPress TheGem theme Elements (for Elementor) plugin < 5.12.1.1 - Cross Site S

CVE Details

🏷️ Tags

More from Vulnerabilities

Report: - Tenda HG3 formCountrystr os command injection CVE-2026-7119

Report: CVE-2026-7121 - Totolink A8000RU CGI cstecgi.cgi setWizardCfg os command injection

Report: Update: CVE-2026-7122 - Totolink A8000RU CGI cstecgi.cgi setUPnPCfg os command injection

Report: CVE-2025-15626 - Authenticated user can bypass authorization in Ribblr - Crochet & Knitting iOS a

Trending

CVE-2025-61481: Critical Remote Code Execution Vulnerability in MikroTik RouterOS & SwitchOS

CVE-2025-43939: Dell Unity OS Command Injection (High)

Google disputes false claims of massive Gmail data breach

Microsoft: DNS outage impacts Azure and Microsoft 365 services

3.5B Accounts, 1 Critical Flaw: Meta Closes WhatsApp Data-Harvesting