← All advisories

Critical severity9.3NVD Advisory· Published Aug 20, 2026· Updated Aug 20, 2026

CVE-2026-66609

CVE-2026-66609

Description

Unauthenticated SQL Injection in TheGem (Elementor) <= 5.12.3 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

WordPress/Thegemllm-fuzzy
Range: <=5.12.3
Package: https://wordpress.org/themes/thegem

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/theme/thegem-elementor/vulnerability/wordpress-thegem-elementor-theme-5-12-3-sql-injection-vulnerabilitynvd

News mentions

0

No linked articles in our index yet.