Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: ThemeGoods Component: Grand Conference Clear all filters
TI-2025-39667 CVE-2025-64224 · GHSA-4c24-2mrg-x84r

WordPress Grand Conference Theme Custom Post Type plugin < 2.6.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Conference Theme Custom Post Type grandconference-custom-post allows Reflected XSS.This issue affects…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00191 Published 2025-11-06 No fix listed CWE-79
TI-2025-37482 CVE-2025-60116 · GHSA-q4gj-97g2-cwmr

WordPress Grand Conference Theme Custom Post Type plugin < 2.6.4 - Broken Access Control vulnerability

Priority LOW 38

Missing Authorization vulnerability in ThemeGoods Grand Conference Theme Custom Post Type grandconference-custom-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grand Confe…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00305 Published 2025-09-26 No fix listed CWE-862
TI-2025-26096 CVE-2025-39354 · GHSA-p5p2-m2mh-3r9v

WordPress Grand Conference theme <= 5.3 - PHP Object Injection vulnerability

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Conference grandconference allows Object Injection.This issue affects Grand Conference: from n/a through <= 5.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00485 Published 2025-05-19 No fix listed CWE-502