Description
Unauthenticated Broken Access Control in Grand News <= 3.4 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ThemeGoods | Grand News | ≤ 3.4 | — |
High · 7.5
CVE-2026-42705
EUVD-2026-96442GHSA-5g75-fv5c-63hr
WordPress Grand News theme <= 3.4 - Broken Access Control vulnerability
Published Oct 10, 2026 · Updated Oct 11, 2026 · Assigned by Patchstack