Medium · 5.4 CVE-2026-66652 EUVD-2026-69943GHSA-hr78-p3w8-cqhw

WordPress Grand Tour theme <= 5.5.1 - Cross Site Request Forgery (CSRF) vulnerability

Published Sep 2, 2026 · Updated Sep 2, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Tour allows Cross Site Request Forgery.

This issue affects Grand Tour: from n/a through 5.5.1.

Vendor	Product	Affected	Fixed
ThemeGoods	Grand Tour	≤ 5.5.1	—