Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how themegoods compares to other vendors in security performance

View Risk Score →

Software

themegoods grand restaurant
8
themegoods photography
7
themegoods grand restaurant wordpress
6
themegoods grand conference wordpress
3
themegoods photography wordpress
3
themegoods grand blog
2
themegoods grand conference
2
themegoods grand magazine
2
themegoods grand photography
2
themegoods grand tour
2
themegoods photome
2
themegoods altair
1
themegoods altair wordpress
1
themegoods architecturer (wordpress theme)
1
themegoods capella
1
themegoods craft
1
themegoods dotlife
1
themegoods grand car rental
1
themegoods grand conference theme
1
themegoods grand conference theme custom post type
1
themegoods grand news
1
themegoods grand portfolio
1
themegoods grand restaurant theme elements for elementor
1
themegoods grand spa
1
themegoods grand tour wordpress
1
themegoods grand wedding
1
themegoods hoteller
1
themegoods musico
1
themegoods starto
1

ThemeGoods Grand RestaurantWordPress Grand Restaurant theme < 7.0.11 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
XSS
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Reflected XSS.This issue affects Grand Restaurant: from n/a before 7.0.11.

First published (updated )
CVE-2026-94161

ThemeGoods Grand PhotographyWordPress Grand Photography theme <= 5.7.8 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Photography grandphotography allows Object Injection.This issue affects Grand Photography: from n/a through <= 5.7.8.

First published (updated )
CVE-2026-57770

ThemeGoods Grand MagazineWordPress Grand Magazine theme <= 3.5.5 - Cross Site Request Forgery (CSRF) vulnerability

Risk 34
Severity
5.4
CSRF
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Magazine grandmagazine allows Cross Site Request Forgery.This issue affects Grand Magazine: from n/a through <= 3.5.5.

First published (updated )
CVE-2026-39635

ThemeGoods Grand PortfolioWordPress Grand Portfolio theme <= 3.3 - Cross Site Request Forgery (CSRF) vulnerability

Risk 34
Severity
5.4
CSRF
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Portfolio grandportfolio allows Cross Site Request Forgery.This issue affects Grand Portfolio: from n/a through <= 3.3.

First published (updated )
CVE-2026-39634

ThemeGoods Grand Car RentalWordPress Grand Car Rental theme <= 3.6.9 - Cross Site Request Forgery (CSRF) vulnerability

Risk 37
Severity
6.5
CSRF
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Car Rental grandcarrental allows Cross Site Request Forgery.This issue affects Grand Car Rental: from n/a through <= 3.6.9.

First published (updated )
CVE-2026-39633

ThemeGoods Grand BlogWordPress Grand Blog theme <= 3.1 - Cross Site Request Forgery (CSRF) vulnerability

Risk 37
Severity
6.5
CSRF
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Blog grandblog allows Cross Site Request Forgery.This issue affects Grand Blog: from n/a through <= 3.1.

First published (updated )
CVE-2026-39632

ThemeGoods Grand PhotographyWordPress Grand Photography theme <= 5.7.8 - Cross Site Request Forgery (CSRF) vulnerability

Risk 34
Severity
5.4
CSRF
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Photography grandphotography allows Cross Site Request Forgery.This issue affects Grand Photography: from n/a through <= 5.7.8.

First published (updated )
CVE-2026-39603

ThemeGoods Photography (WordPress theme)WordPress Photography theme < 7.7.6 - Arbitrary File Upload vulnerability

Risk 34
Severity
7.2
Malicious File Upload, Path Traversal
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Unrestricted Upload of File with Dangerous Type vulnerability in ThemeGoods Photography allows Path Traversal.This issue affects Photography: from n/a before 7.7.6.

1 / 2
Source: NVD

Remedy

Update the WordPress Photography theme to the latest available version (at least 7.7.6).
First published (updated )
CVE-2026-27043

ThemeGoods MusicoWordPress Musico theme < 3.4.5 - Cross Site Scripting (XSS) vulnerability

Risk 36
Severity
7.1
EPSS
0.03%
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Musico allows Reflected XSS.This issue affects Musico: from n/a before 3.4.5.

1 / 2
Source: NVD

Remedy

Update the WordPress Musico theme to the latest available version (at least 3.4.5).
First published (updated )
CVE-2026-27367

ThemeGoods ArchitecturerWordPress Architecturer theme < 3.9.5 - Cross Site Scripting (XSS) vulnerability

Risk 36
Severity
7.1
EPSS
0.03%
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Architecturer allows Reflected XSS.This issue affects Architecturer: from n/a before 3.9.5.

1 / 2
Source: NVD

Remedy

Update the WordPress Architecturer theme to the latest available version (at least 3.9.5).
First published (updated )
CVE-2026-27358

ThemeGoods PhotographyWordPress Photography theme < 7.7.6 - Cross Site Scripting (XSS) vulnerability

Risk 36
Severity
7.1
EPSS
0.03%
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Photography allows DOM-Based XSS.This issue affects Photography: from n/a before 7.7.6.

1 / 2
Source: NVD

Remedy

Update the WordPress Photography theme to the latest available version (at least 7.7.6).
First published (updated )
CVE-2026-27348

ThemeGoods StartoWordPress Starto theme < 2.2.5 - Cross Site Scripting (XSS) vulnerability

Risk 36
Severity
7.1
EPSS
0.03%
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Starto allows Reflected XSS.This issue affects Starto: from n/a before 2.2.5.

1 / 2
Source: NVD

Remedy

Update the WordPress Starto theme to the latest available version (at least 2.2.5).
First published (updated )
CVE-2026-27352

ThemeGoods Grand NewsWordPress Grand News | Magazine Newspaper WordPress theme <= 3.4.3 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 36
Severity
7.1
EPSS
0.03%
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand News grandnews allows Reflected XSS.This issue affects Grand News: from n/a through <= 3.4.3.

First published (updated )
CVE-2026-27353

ThemeGoods Grand WeddingWordPress Grand Wedding theme < 3.1.11 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Wedding grandwedding allows Object Injection.This issue affects Grand Wedding: from n/a through < 3.1.11.

1 / 2
Source: MITRE
First published (updated )
CVE-2026-22417

ThemeGoods PhotoMeWordPress PhotoMe theme <= 5.7.1 - Cross Site Scripting (XSS) vulnerability

Risk 36
Severity
7.1
EPSS
0.03%
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods PhotoMe photome allows DOM-Based XSS.This issue affects PhotoMe: from n/a through <= 5.7.1.

First published (updated )
CVE-2026-24949

ThemeGoods Grand ConferenceWordPress Grand Conference theme <= 5.3.4 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 36
Severity
7.1
EPSS
0.03%
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Conference grandconference allows Reflected XSS.This issue affects Grand Conference: from n/a through <= 5.3.4.

First published (updated )
CVE-2026-24943

ThemeGoods CapellaWordPress Capella theme <= 2.5.5 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeGoods Capella capella allows Object Injection.This issue affects Capella: from n/a through <= 2.5.5.

First published (updated )
CVE-2025-69370

ThemeGoods PhotoMeWordPress PhotoMe theme <= 5.6.11 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeGoods PhotoMe photome allows Object Injection.This issue affects PhotoMe: from n/a through <= 5.6.11.

First published (updated )
CVE-2025-69301

ThemeGoods Grand RestaurantWordPress Grand Restaurant theme <= 7.0.10 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Object Injection.This issue affects Grand Restaurant: from n/a through <= 7.0.10.

First published (updated )
CVE-2026-23542

ThemeGoods Grand BlogWordPress Grand Blog theme < 3.1.5 - Server Side Request Forgery (SSRF) vulnerability

Risk 26
Severity
5.4
EPSS
0.03%
SSRF
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N

Server-Side Request Forgery (SSRF) vulnerability in ThemeGoods Grand Blog grandblog allows Server Side Request Forgery.This issue affects Grand Blog: from n/a through < 3.1.5.

First published (updated )
CVE-2026-24961

ThemeGoods Grand MagazineWordPress Grand Magazine theme <= 3.5.7 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Magazine grandmagazine allows Reflected XSS.This issue affects Grand Magazine: from n/a through <= 3.5.7.

First published (updated )
CVE-2025-69320

ThemeGoods Grand SpaWordPress Grand Spa theme <= 3.5.5 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Spa grandspa allows Reflected XSS.This issue affects Grand Spa: from n/a through <= 3.5.5.

First published (updated )
CVE-2025-69321

ThemeGoods CraftWordPress Craft | Coffee Shop Cafe Restaurant WordPress theme <= 2.3.6 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Craft craftcoffee allows DOM-Based XSS.This issue affects Craft: from n/a through <= 2.3.6.

First published (updated )
CVE-2025-68538

ThemeGoods DotLifeWordPress DotLife theme < 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods DotLife dotlife allows Reflected XSS.This issue affects DotLife: from n/a through < 4.9.5.

First published (updated )
CVE-2025-68520

ThemeGoods HotellerWordPress Hoteller theme < 6.8.9 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Hoteller hoteller allows Reflected XSS.This issue affects Hoteller: from n/a through < 6.8.9.

First published (updated )
CVE-2025-68518

ThemeGoods PhotographyWordPress Photography theme < 7.7.5 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeGoods Photography photography allows PHP Local File Inclusion.This issue affects Photography: from n/a through < 7.7.5.

First published (updated )
CVE-2025-68510

ThemeGoods Grand TourWordPress Grand Tour theme < 5.6.2 - Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Tour grandtour allows Reflected XSS.This issue affects Grand Tour: from n/a through < 5.6.2.

First published (updated )
CVE-2025-67952

ThemeGoods Grand Restaurant Theme Elements for ElementorWordPress Grand Restaurant Theme Elements for Elementor plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

Risk 46
Severity
6.5
XSS
AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Restaurant Theme Elements for Elementor grandrestaurant-elementor allows Stored XSS.This issue affects Grand Restaurant Theme Elements for Elementor: from n/a through <= 2.1.1.

First published (updated )
CVE-2025-63026

ThemeGoods Grand RestaurantWordPress Grand Restaurant theme < 7.0.9 - Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
XSS
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Reflected XSS.This issue affects Grand Restaurant: from n/a through < 7.0.9.

First published (updated )
CVE-2025-67922

wordpress/photographyWordPress Photography theme <= 7.7.2 - Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Photography photography allows Reflected XSS.This issue affects Photography: from n/a through <= 7.7.2.

First published (updated )
CVE-2025-64217

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203