CVE-2025-39351: WordPress Grand Restaurant WordPress theme <= 7.0 - Cross Site Request Forgery (CSRF) vulnerability

Published May 19, 2025
·
Updated

Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Cross Site Request Forgery.This issue affects Grand Restaurant: from n/a through <= 7.0.

Affected Software

2 affected components
ThemeGoods Grand Restaurant<=7.0
ThemeGoods Grand Restaurant WordPress<=7.0

Event History

May 19, 2025
CVE Published
via MITRE·04:30 PM
Data Sourced
via MITRE·04:30 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2025-39351?

CVE-2025-39351 has a medium severity level as it allows Cross-Site Request Forgery in the Grand Restaurant WordPress theme.

2

How do I fix CVE-2025-39351?

To fix CVE-2025-39351, update the Grand Restaurant WordPress theme to the latest version beyond 7.0.

3

What versions of Grand Restaurant are affected by CVE-2025-39351?

CVE-2025-39351 affects all versions of the Grand Restaurant WordPress theme from n/a up to 7.0.

4

What is Cross-Site Request Forgery (CSRF) in the context of CVE-2025-39351?

In the context of CVE-2025-39351, CSRF allows an attacker to trick users into executing unwanted actions on a web application where they are authenticated.

5

Who is the vendor responsible for the Grand Restaurant theme affected by CVE-2025-39351?

The vendor responsible for the Grand Restaurant theme affected by CVE-2025-39351 is ThemeGoods.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203