CodexThemes TheGem Theme Elements PHP Local File Inclusion Vulnerability

A vulnerability allowing PHP local file inclusion has been identified in CodexThemes TheGem Theme Elements for Elementor, versions prior to and including 5.11.0. This issue arises from improper control of filenames in include or require statements, potentially leading to unauthorized access to local files on the server.

Impact

Exploitation of this vulnerability could allow an attacker to include local files through PHP's include or require functions, which could be used to execute arbitrary PHP code or read sensitive files on the server.