Skip to content
Noroxi

ThemeGoods records

14 published records for vendor themegoods.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
28.6%
Median publish → KEV
No record has entered KEV

Records by year

  1. 25
  2. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

14 records
  • CVE-2025-39485
    39Monitor

    WordPress GrandTour theme <= 5.6 - PHP Object Injection vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    themegoods · grand tourMay 23, 2025

  • CVE-2025-32926
    39Monitor

    WordPress Grand Restaurant WordPress theme <= 7.0 - Path Traversal to PHP Object Injection vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    themegoods · grand restaurantMay 19, 2025

  • CVE-2025-39354
    39Monitor

    WordPress Grand Conference theme <= 5.3 - PHP Object Injection vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    themegoods · grand conferenceMay 19, 2025

  • CVE-2025-39348
    39Monitor

    WordPress Grand Restaurant WordPress theme <= 7.0 - PHP Object Injection vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    themegoods · grand restaurantMay 19, 2025

  • CVE-2025-32928
    39Monitor

    WordPress Altair theme <= 5.2.2 - PHP Object Injection vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    themegoods · altairMay 19, 2025

  • CVE-2025-60116
    35Monitor

    WordPress Grand Conference Theme Custom Post Type plugin < 2.6.4 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    themegoods · grand conferenceSep 26, 2025

  • CVE-2025-47579
    32Monitor

    WordPress Photography Theme <= 7.7.2 - PHP Object Injection Vulnerability

    HighCVSS 8.1No exploitEPSS 0%

    themegoods · photographySep 9, 2025

  • CVE-2025-39352
    32Monitor

    WordPress Grand Restaurant WordPress theme <= 7.0 - Arbitrary Options Deletion vulnerability

    HighCVSS 8.2No exploitEPSS 0%

    themegoods · grand restaurantMay 19, 2025

  • CVE-2025-47584
    30Monitor

    WordPress Photography theme <= 7.5.2 - PHP Object Injection vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    themegoods · photographyJun 6, 2025

  • CVE-2025-67922
    28Monitor

    WordPress Grand Restaurant theme < 7.0.9 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    themegoods · grand restaurantJan 8, 2026

  • CVE-2025-64217
    28Monitor

    WordPress Photography theme <= 7.7.2 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    themegoods · photographyDec 18, 2025

  • CVE-2025-64224
    28Monitor

    WordPress Grand Conference Theme Custom Post Type plugin < 2.6.4 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    themegoods · grand conferenceNov 6, 2025

  • CVE-2025-39353
    21Monitor

    WordPress Grand Restaurant WordPress theme <= 7.0 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    themegoods · grand restaurantMay 19, 2025

  • CVE-2025-39351
    17Monitor

    WordPress Grand Restaurant WordPress theme <= 7.0 - Cross Site Request Forgery (CSRF) vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    themegoods · grand restaurantMay 19, 2025