ThemeGoods
Vulnerability activity for ThemeGoods: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 3
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 3
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 6
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 7.5HighOct 10, 2026ThemeGoods DK Auth bypass / access controlCVE-2026-42706Unauthenticated Broken Access Control in DK <= 3.2.1 versions.
- 7.5HighOct 10, 2026ThemeGoods Grand News Auth bypass / access controlCVE-2026-42705Unauthenticated Broken Access Control in Grand News <= 3.4 versions.
- 7.1HighOct 9, 2026ThemeGoods Grand Restaurant XSSCVE-2026-94161Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Reflected XSS.This issue affects Grand Restaurant: from n/a before 7.0.11.
- 7.1HighJan 8, 2026Themegoods grand restaurant XSSCVE-2025-67922Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Reflected XSS.This issue affects Grand Restaurant: from n/a through < 7.0.9.
- 7.1HighDec 18, 2025Themegoods photography XSSCVE-2025-64217Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Photography photography allows Reflected XSS.This issue affects Photography: from n/a through <= 7.7.2.
- 7.1HighNov 6, 2025Themegoods grand conference XSSCVE-2025-64224Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Conference Theme Custom Post Type grandconference-custom-post allows Reflected XSS.This issue affects Grand Conference Theme Custom Post Type: from n/a through < 2.6.4.
Top products
- Grand Restaurant2 CVEs in the last year
- photography1 CVE in the last year
- Grand News1 CVE in the last year
- grand conference1 CVE in the last year
- DK1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.