CodexThemes TheGem Theme Improper Control of Filename Vulnerability in Elementor Integration

A PHP remote file inclusion vulnerability has been identified in CodexThemes TheGem Theme Elements for Elementor, affecting versions prior to and including 5.10.5.1. This vulnerability arises from improper control of filenames in include or require statements, potentially allowing for the inclusion of malicious files.

Impact

Exploitation of this vulnerability could lead to remote file inclusion, allowing attackers to include files from remote servers and execute them on the server where the vulnerable theme is active.