Read the docs

ThemeGoods

Records57All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical14CVSS 9.0–10.0
CVSS high28CVSS 7.0–8.9

Exploited now

ThemeGoods records in CISA KEV

No ThemeGoods vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Grand Restaurant 6 records MEDIUM Grand Conference 3 records MEDIUM Photography 3 records MEDIUM Altair 1 record MEDIUM Grand Tour 1 record MEDIUM

Records

3 records in Grand Conference · all components

TI-2025-26096 CVE-2025-39354 · GHSA-p5p2-m2mh-3r9v

WordPress Grand Conference theme <= 5.3 - PHP Object Injection vulnerability

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Conference grandconference allows Object Injection.This issue affects Grand Conference: from n/a through <= 5.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00485 Published 2025-05-19 No fix listed CWE-502
TI-2025-37482 CVE-2025-60116 · GHSA-q4gj-97g2-cwmr

WordPress Grand Conference Theme Custom Post Type plugin < 2.6.4 - Broken Access Control vulnerability

Priority LOW 38

Missing Authorization vulnerability in ThemeGoods Grand Conference Theme Custom Post Type grandconference-custom-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grand Confe…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00305 Published 2025-09-26 No fix listed CWE-862
TI-2025-39667 CVE-2025-64224 · GHSA-4c24-2mrg-x84r

WordPress Grand Conference Theme Custom Post Type plugin < 2.6.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Conference Theme Custom Post Type grandconference-custom-post allows Reflected XSS.This issue affects…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00191 Published 2025-11-06 No fix listed CWE-79
Open these records in search →