ThemeGoods

Records57All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical14CVSS 9.0–10.0

CVSS high28CVSS 7.0–8.9

Exploited now

ThemeGoods records in CISA KEV

No ThemeGoods vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Grand Restaurant 6 records MEDIUM Grand Conference 3 records MEDIUM Photography 3 records MEDIUM Altair 1 record MEDIUM Grand Tour 1 record MEDIUM

Records

1 record in Grand Tour · all components

TI-2025-26227 CVE-2025-39485 · GHSA-2g6j-8hm3-67hp

WordPress GrandTour theme <= 5.6 - PHP Object Injection vulnerability

MEDIUM 50

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Tour grandtour allows Object Injection.This issue affects Grand Tour: from n/a through <= 5.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00616 Published 2025-05-23 No fix listed CWE-502

Open these records in search →

Critical	14
High	28
Medium	15
Low	0
No CVSS	0