Browse CVEs

HIGH 7.1 CVE-2025-67922 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Restaurant grandrestaurant all… Grand Restaurant 7.0.9+ Fix from $1,9502026-01-08 HIGH 7.1 CVE-2025-64217 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Photography photography allows Refle… Photography after 7.7.2 Fix from $1,9502025-12-18 HIGH 7.1 CVE-2025-64224 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Conference Theme Custom Post T… Grand Conference 2.6.4+ Fix from $1,9502025-11-06 HIGH 8.8 CVE-2025-60116 Missing Authorization vulnerability in ThemeGoods Grand Conference Theme Custom Post Type grandconference-custom-post allows Exploiting Incorrectly C… Grand Conference 2.6.4+ Fix from $1,9502025-09-26 HIGH 8.1 CVE-2025-47579 Deserialization of Untrusted Data vulnerability in ThemeGoods Photography photography allows Object Injection.This issue affects Photography: from n/… Photography after 7.7.2 Fix from $1,9502025-09-09 HIGH 7.5 CVE-2025-47584 Deserialization of Untrusted Data vulnerability in ThemeGoods Photography.This issue affects Photography: from n/a through 7.5.2. Photography after 7.7.2 Fix from $1,9502025-06-06 CRITICAL 9.8 CVE-2025-39485 Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Tour grandtour allows Object Injection.This issue affects Grand Tour: from n/a th… Grand Tour after 5.6 Fix from $2,3002025-05-23 CRITICAL 9.8 CVE-2025-39354 Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Conference grandconference allows Object Injection.This issue affects Grand Confe… Grand Conference after 5.3 Fix from $2,3002025-05-19 HIGH 8.2 CVE-2025-39352 Missing Authorization vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Exploiting Incorrectly Configured Access Control Security L… Grand Restaurant after 7.0 Fix from $1,9502025-05-19 CRITICAL 9.8 CVE-2025-32926 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Pa… Grand Restaurant after 7.0 Fix from $2,3002025-05-19 CRITICAL 9.8 CVE-2025-32928 Deserialization of Untrusted Data vulnerability in ThemeGoods Altair altair allows Object Injection.This issue affects Altair: from n/a through <= 5.… Altair after 5.2.2 Fix from $2,3002025-05-19 CRITICAL 9.8 CVE-2025-39348 Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Object Injection.This issue affects Grand Resta… Grand Restaurant after 7.0 Fix from $2,3002025-05-19 MEDIUM 5.3 CVE-2025-39353 Missing Authorization vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Exploiting Incorrectly Configured Access Control Security L… Grand Restaurant after 7.0 Fix from $1,6002025-05-19