Vulnerabilities

TI-2025-41531 CVE-2025-67922 · GHSA-8r85-4w5h-9v69

WordPress Grand Restaurant theme < 7.0.9 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Reflected XSS.This issue affects Grand Restaurant: from n/a through…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00219 Published 2026-01-08 No fix listed CWE-79

TI-2025-23947 CVE-2025-32926 · GHSA-7c8r-v4x3-jvvm

WordPress Grand Restaurant WordPress theme <= 7.0 - Path Traversal to PHP Object Injection vulnerability

MEDIUM 50

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Path Traversal.This issue affects Grand Restaurant: from n/a through <= 7…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00576 Published 2025-05-19 No fix listed CWE-22

TI-2025-26090 CVE-2025-39348 · GHSA-j6mm-98gm-g9jj

WordPress Grand Restaurant WordPress theme <= 7.0 - PHP Object Injection vulnerability

MEDIUM 49

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Object Injection.This issue affects Grand Restaurant: from n/a through <= 7.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00485 Published 2025-05-19 No fix listed CWE-502

TI-2025-26094 CVE-2025-39352 · GHSA-75pg-hm2h-v575

WordPress Grand Restaurant WordPress theme <= 7.0 - Arbitrary Options Deletion vulnerability

MEDIUM 42

Missing Authorization vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grand Restaurant: from n/a through <= 7.0.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00321 Published 2025-05-19 No fix listed CWE-862

TI-2025-26095 CVE-2025-39353 · GHSA-2m98-w299-f59w

WordPress Grand Restaurant WordPress theme <= 7.0 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grand Restaurant: from n/a through <= 7.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00274 Published 2025-05-19 No fix listed CWE-862

TI-2025-26093 CVE-2025-39351 · GHSA-7xmm-8q26-r88f

WordPress Grand Restaurant WordPress theme <= 7.0 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Cross Site Request Forgery.This issue affects Grand Restaurant: from n/a through <= 7.0.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00151 Published 2025-05-19 No fix listed CWE-352