Themegoods vulnerabilities

Products

• Photography 9
• Grand Restaurant 8
• Altair 7
• Grand Restaurant 6
• Capella 3
• Grand Conference 3
• Grand Photography 3
• Grand Tour 3
• Photome 3
• Grand Blog 2
• Grand Car Rental 2
• Grand Conference 2
• Grand Conference Theme Custom Post Type 2
• Grand Magazine 2
• Grand News 2

Newest

• altair-graphql altair, altair-express-middleware, altair-fastify-plugin +2 more +4 more Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox CVE-2026-110802 6.1 MediumNovember 5, 2026
• themegoods dk WordPress DK theme <= 3.2.1 - Broken Access Control vulnerability CVE-2026-42706 7.5 HighOctober 10, 2026
• themegoods grand news WordPress Grand News theme <= 3.4 - Broken Access Control vulnerability CVE-2026-42705 7.5 HighOctober 10, 2026
• themegoods grand restaurant WordPress Grand Restaurant theme < 7.0.11 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-94161 7.1 HighOctober 9, 2026
• themegoods grand tour WordPress Grand Tour theme <= 5.5.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-66652 5.4 MediumSeptember 2, 2026
• themegoods altair WordPress Altair theme <= 5.2.2 - Broken Access Control vulnerability CVE-2025-53999 6.5 MediumAugust 20, 2026
• themegoods capella WordPress Capella theme <= 2.5.5 - Privilege Escalation vulnerability CVE-2025-15689 9.8 CriticalAugust 20, 2026
• themegoods capella WordPress Capella theme <= 2.5.5 - SQL Injection vulnerability CVE-2025-15688 9.3 CriticalAugust 20, 2026
• themegoods photography WordPress Photography theme <= 7.7.6 - Broken Access Control vulnerability CVE-2026-65487 5.3 MediumJuly 23, 2026
• themegoods grand photography WordPress Grand Photography theme <= 5.7.8 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-57769 7.1 HighJuly 23, 2026
• themegoods grand photography WordPress Grand Photography theme <= 5.7.8 - PHP Object Injection vulnerability CVE-2026-57770 9.8 CriticalJuly 13, 2026
• themegoods artale | wedding photography wordpress WordPress Artale | Wedding Photography WordPress theme <= 2.2.2 - Cross Site Scripting (XSS) vulnerability CVE-2025-69152 7.1 HighJuly 2, 2026
• themegoods avante WordPress Avante theme < 3.0.5 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-68524 7.1 HighJune 17, 2026
• themegoods grand car rental WordPress Grand Car Rental theme <= 3.7 - Cross Site Scripting (XSS) vulnerability CVE-2025-69151 7.1 HighJune 16, 2026
• themegoods grand magazine WordPress Grand Magazine theme <= 3.5.5 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-39635 5.4 MediumApril 8, 2026
• themegoods grand portfolio WordPress Grand Portfolio theme <= 3.3 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-39634 5.4 MediumApril 8, 2026
• themegoods grand car rental WordPress Grand Car Rental theme <= 3.6.9 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-39633 6.5 MediumApril 8, 2026
• themegoods grand blog WordPress Grand Blog theme <= 3.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-39632 6.5 MediumApril 8, 2026
• themegoods grand photography WordPress Grand Photography theme <= 5.7.8 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-39603 5.4 MediumApril 8, 2026
• themegoods photography WordPress Photography theme < 7.7.6 - Arbitrary File Upload vulnerability CVE-2026-27043 7.2 HighMarch 19, 2026
• themegoods musico WordPress Musico theme < 3.4.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-27367 7.1 HighMarch 5, 2026
• themegoods architecturer WordPress Architecturer theme < 3.9.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-27358 7.1 HighMarch 5, 2026
• themegoods grand news WordPress Grand News | Magazine Newspaper WordPress theme <= 3.4.3 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-27353 7.1 HighMarch 5, 2026
• themegoods starto WordPress Starto theme < 2.2.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-27352 7.1 HighMarch 5, 2026
• themegoods photography WordPress Photography theme < 7.7.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-27348 7.1 HighMarch 5, 2026
• themegoods grand wedding WordPress Grand Wedding theme < 3.1.11 - PHP Object Injection vulnerability CVE-2026-22417 9.8 CriticalMarch 5, 2026
• themegoods photome WordPress PhotoMe theme <= 5.7.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-24949 7.1 HighFebruary 20, 2026
• themegoods grand conference WordPress Grand Conference theme <= 5.3.4 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-24943 7.1 HighFebruary 20, 2026
• themegoods capella WordPress Capella theme <= 2.5.5 - PHP Object Injection vulnerability CVE-2025-69370 9.8 CriticalFebruary 20, 2026
• themegoods photome WordPress PhotoMe theme <= 5.6.11 - PHP Object Injection vulnerability CVE-2025-69301 9.8 CriticalFebruary 20, 2026
• themegoods grand restaurant WordPress Grand Restaurant theme <= 7.0.10 - PHP Object Injection vulnerability CVE-2026-23542 9.8 CriticalFebruary 19, 2026
• themegoods grand blog WordPress Grand Blog theme < 3.1.5 - Server Side Request Forgery (SSRF) vulnerability CVE-2026-24961 5.4 MediumFebruary 3, 2026
• themegoods photome WordPress PhotoMe theme < 5.7.2 - Server Side Request Forgery (SSRF) vulnerability CVE-2026-24381 5.4 MediumJanuary 22, 2026
• themegoods grand spa WordPress Grand Spa theme <= 3.5.5 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-69321 7.1 HighJanuary 22, 2026
• themegoods grand magazine WordPress Grand Magazine theme <= 3.5.7 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-69320 7.1 HighJanuary 22, 2026
• themegoods craft WordPress Craft | Coffee Shop Cafe Restaurant WordPress theme <= 2.3.6 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-68538 7.1 HighJanuary 22, 2026
• themegoods dotlife WordPress DotLife theme < 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-68520 7.1 HighJanuary 22, 2026
• themegoods hoteller WordPress Hoteller theme < 6.8.9 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-68518 7.1 HighJanuary 22, 2026
• themegoods photography WordPress Photography theme < 7.7.5 - Local File Inclusion vulnerability CVE-2025-68510 8.1 HighJanuary 22, 2026
• themegoods grand tour WordPress Grand Tour theme < 5.6.2 - Cross Site Scripting (XSS) vulnerability CVE-2025-67952 7.1 HighJanuary 22, 2026
• themegoods grand restaurant theme elements for elementor WordPress Grand Restaurant Theme Elements for Elementor plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-63026 6.5 MediumJanuary 22, 2026
• themegoods grand restaurant WordPress Grand Restaurant theme < 7.0.9 - Cross Site Scripting (XSS) vulnerability CVE-2025-67922 7.1 HighJanuary 8, 2026
• themegoods photography WordPress Photography theme <= 7.7.2 - Cross Site Scripting (XSS) vulnerability CVE-2025-64217 7.1 HighDecember 18, 2025
• themegoods grand conference theme custom post type, grand conference +1 more WordPress Grand Conference Theme Custom Post Type plugin < 2.6.4 - Cross Site Scripting (XSS) vulnerability CVE-2025-64224 7.1 HighNovember 6, 2025
• themegoods grand conference theme custom post type, grand conference +1 more WordPress Grand Conference Theme Custom Post Type plugin < 2.6.4 - Broken Access Control vulnerability CVE-2025-60116 5.4 MediumSeptember 26, 2025
• themegoods photography WordPress Photography Theme <= 7.7.2 - PHP Object Injection Vulnerability CVE-2025-47579 9.0 CriticalSeptember 9, 2025
• themegoods photography WordPress Photography theme <= 7.5.2 - PHP Object Injection vulnerability CVE-2025-47584 8.5 HighJune 6, 2025
• themegoods grand tour WordPress GrandTour theme <= 5.6 - PHP Object Injection vulnerability CVE-2025-39485 9.8 CriticalMay 23, 2025
• themegoods grand restaurant WordPress Grand Restaurant WordPress theme <= 7.0 - Path Traversal to PHP Object Injection vulnerability CVE-2025-32926 9.8 CriticalMay 19, 2025
• themegoods altair WordPress Altair theme <= 5.2.2 - PHP Object Injection vulnerability CVE-2025-32928 9.8 CriticalMay 19, 2025
• Show olderLoading…