CVE-2025-32926: WordPress Grand Restaurant WordPress theme <= 7.0 - Path Traversal to PHP Object Injection vulnerability
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Path Traversal.This issue affects Grand Restaurant: from n/a through <= 7.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-32926?
CVE-2025-32926 has been classified as a high severity vulnerability due to its potential for exploitation via path traversal.
How do I fix CVE-2025-32926?
To fix CVE-2025-32926, update the Grand Restaurant WordPress theme to a version above 7.0 as soon as possible.
What does CVE-2025-32926 affect?
CVE-2025-32926 affects the ThemeGoods Grand Restaurant WordPress theme version 7.0 and earlier.
What is a Path Traversal vulnerability like CVE-2025-32926?
A Path Traversal vulnerability, such as CVE-2025-32926, allows an attacker to access unauthorized file paths within a system.
Is my website vulnerable if I use an affected version of Grand Restaurant?
Yes, if you are using Grand Restaurant WordPress theme version 7.0 or lower, your website is vulnerable to CVE-2025-32926.