CVE-2025-39353: WordPress Grand Restaurant WordPress theme <= 7.0 - Broken Access Control vulnerability
Published May 19, 2025
·Updated
Missing Authorization vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grand Restaurant: from n/a through <= 7.0.
Affected Software
2 affected components
ThemeGoods Grand Restaurant<=7.0
ThemeGoods Grand Restaurant WordPress<=7.0
Event History
May 19, 2025
CVE Published
via MITRE·04:30 PM
Data Sourced
via MITRE·04:30 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-39353?
The severity of CVE-2025-39353 is high due to its impact on access control configurations.
2
How do I fix CVE-2025-39353?
To fix CVE-2025-39353, update the ThemeGoods Grand Restaurant WordPress theme to the latest version beyond 7.0.
3
What versions are affected by CVE-2025-39353?
CVE-2025-39353 affects all versions of the Grand Restaurant WordPress theme up to and including version 7.0.
4
What type of vulnerability is CVE-2025-39353?
CVE-2025-39353 is a missing authorization vulnerability that allows exploiting incorrectly configured access control.
5
Who is the vendor for CVE-2025-39353?
The vendor for CVE-2025-39353 is ThemeGoods, which develops the Grand Restaurant WordPress theme.