Skip to content
OpenAdvisories

Vendor

ThemeGoods

57 known vulnerabilities.

Products

Photography 9 Grand Restaurant 8 Grand Photography 3 Altair 3 Grand Tour 3 Capella 3 PhotoMe 3 Grand Blog 2 Grand Conference 2 Grand Car Rental 2 Grand Magazine 2 Grand Conference Theme Custom Post Type 2 Grand News 2 Hoteller 1 Craft 1 Grand Wedding 1 Grand Restaurant Theme Elements for Elementor 1 Grand Portfolio 1 DK 1 Avante 1 Starto 1 Architecturer 1 Grand Spa 1 Musico 1 Artale | Wedding Photography WordPress 1 DotLife 1
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-66652

    WordPress Grand Tour theme <= 5.5.1 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Tour allows Cross Site Request Forgery. This issue affects Grand Tour: from n/a through 5.5.1.

    ThemeGoods Grand Tour
  • Medium 6.5
    CVE-2025-53999

    WordPress Altair theme <= 5.2.2 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in Altair <= 5.2.2 versions.

    ThemeGoods Altair
  • Medium 5.3
    CVE-2026-65487

    WordPress Photography theme <= 7.7.6 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in Photography <= 7.7.6 versions.

    ThemeGoods Photography
  • Medium 5.4
    CVE-2026-39635

    WordPress Grand Magazine theme <= 3.5.5 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Magazine grandmagazine allows Cross Site Request Forgery.This issue affects Grand Magazine: from n/a through <= 3.5.5.

    ThemeGoods Grand Magazine
  • Medium 5.4
    CVE-2026-39634

    WordPress Grand Portfolio theme <= 3.3 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Portfolio grandportfolio allows Cross Site Request Forgery.This issue affects Grand Portfolio: from n/a through <= 3.3.

    ThemeGoods Grand Portfolio
  • Medium 6.5
    CVE-2026-39633

    WordPress Grand Car Rental theme <= 3.6.9 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Car Rental grandcarrental allows Cross Site Request Forgery.This issue affects Grand Car Rental: from n/a through <= 3.6.9.

    ThemeGoods Grand Car Rental
  • Medium 6.5
    CVE-2026-39632

    WordPress Grand Blog theme <= 3.1 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Blog grandblog allows Cross Site Request Forgery.This issue affects Grand Blog: from n/a through <= 3.1.

    ThemeGoods Grand Blog
  • Medium 5.4
    CVE-2026-39603

    WordPress Grand Photography theme <= 5.7.8 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Photography grandphotography allows Cross Site Request Forgery.This issue affects Grand Photography: from n/a through <= 5.7.8.

    ThemeGoods Grand Photography
  • Medium 5.4
    CVE-2026-24961

    WordPress Grand Blog theme < 3.1.5 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in ThemeGoods Grand Blog grandblog allows Server Side Request Forgery.This issue affects Grand Blog: from n/a through < 3.1.5.

    ThemeGoods Grand Blog
  • Medium 5.4
    CVE-2026-24381

    WordPress PhotoMe theme < 5.7.2 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in ThemeGoods PhotoMe photome allows Server Side Request Forgery.This issue affects PhotoMe: from n/a through < 5.7.2.

    ThemeGoods PhotoMe
  • Medium 6.5
    CVE-2025-63026

    WordPress Grand Restaurant Theme Elements for Elementor plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Restaurant Theme Elements for Elementor grandrestaurant-elementor allows Stored XSS.This issue affects Grand Restaurant Theme Elements for E…

    ThemeGoods Grand Restaurant Theme Elements for Elementor
  • Medium 5.4
    CVE-2025-60116

    WordPress Grand Conference Theme Custom Post Type plugin < 2.6.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ThemeGoods Grand Conference Theme Custom Post Type grandconference-custom-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grand Conference Theme Custom Post Type: from n/a …

    ThemeGoods Grand Conference Theme Custom Post Type
  • Medium 5.3
    CVE-2025-39353

    WordPress Grand Restaurant WordPress theme <= 7.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grand Restaurant: from n/a through <= 7.0.

    ThemeGoods Grand Restaurant Web / CMS
  • Medium 4.3
    CVE-2025-39351

    WordPress Grand Restaurant WordPress theme <= 7.0 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Cross Site Request Forgery.This issue affects Grand Restaurant: from n/a through <= 7.0.

    ThemeGoods Grand Restaurant Web / CMS
  • Medium 5.4
    CVE-2025-30964

    WordPress Photography theme < 7.7.6 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in ThemeGoods Photography photography allows Server Side Request Forgery.This issue affects Photography: from n/a through < 7.7.6.

    ThemeGoods Photography
  • Medium 6.3
    CVE-2025-22702

    WordPress Photography Theme <= 7.7.2 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in ThemeGoods Photography photography allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photography: from n/a through <= 7.7.2.

    ThemeGoods Photography