TH
Vendor
ThemeGoods
59
CVEs
0
On KEV
3
New 30D
Products
GR9.8
Grand Restaurant
ThemeGoods
8 CVEs0 on KEV1 new
GN7.5
Grand News
ThemeGoods
2 CVEs0 on KEV1 new
DK7.5
DK
ThemeGoods
1 CVEs0 on KEV1 new
PH8.1
Photography
ThemeGoods
9 CVEs0 on KEV0 new
GC9.8
Grand Conference
ThemeGoods
4 CVEs0 on KEV0 new
AL9.8
Altair
ThemeGoods
3 CVEs0 on KEV0 new
CA9.8
Capella
ThemeGoods
3 CVEs0 on KEV0 new
GP9.8
Grand Photography
ThemeGoods
3 CVEs0 on KEV0 new
GT9.8
Grand Tour
ThemeGoods
3 CVEs0 on KEV0 new
PH9.8
PhotoMe
ThemeGoods
3 CVEs0 on KEV0 new
GB6.5
Grand Blog
ThemeGoods
2 CVEs0 on KEV0 new
GC7.1
Grand Car Rental
ThemeGoods
2 CVEs0 on KEV0 new
GC8.8
Grand Conference Theme Custom Post Type
ThemeGoods
2 CVEs0 on KEV0 new
GM7.1
Grand Magazine
ThemeGoods
2 CVEs0 on KEV0 new
AR7.1
Architecturer
ThemeGoods
1 CVEs0 on KEV0 new
AW7.1
Artale | Wedding Photography WordPress
ThemeGoods
1 CVEs0 on KEV0 new
AV7.1
Avante
ThemeGoods
1 CVEs0 on KEV0 new
CR7.1
Craft
ThemeGoods
1 CVEs0 on KEV0 new
DO7.1
DotLife
ThemeGoods
1 CVEs0 on KEV0 new
GP5.4
Grand Portfolio
ThemeGoods
1 CVEs0 on KEV0 new
GR6.5
Grand Restaurant Theme Elements for Elementor
ThemeGoods
1 CVEs0 on KEV0 new
GS7.1
Grand Spa
ThemeGoods
1 CVEs0 on KEV0 new
GW9.8
Grand Wedding
ThemeGoods
1 CVEs0 on KEV0 new
HO7.1
Hoteller
ThemeGoods
1 CVEs0 on KEV0 new
MU7.1
Musico
ThemeGoods
1 CVEs0 on KEV0 new
ST7.1
Starto
ThemeGoods
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-42706 | DK DK ThemeGoods | 7.5 | Oct 10 | WordPress DK theme <= 3.2.1 - Broken Access Control vulnerability |
| CVE-2026-42705 | GN Grand News ThemeGoods | 7.5 | Oct 10 | WordPress Grand News theme <= 3.4 - Broken Access Control vulnerability |
| CVE-2026-94161 | GR Grand Restaurant ThemeGoods | 7.1 | Oct 9 | WordPress Grand Restaurant theme < 7.0.11 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2026-66652 | GT Grand Tour ThemeGoods | 5.4 | Sep 2 | WordPress Grand Tour theme <= 5.5.1 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2025-53999 | AL Altair ThemeGoods | 6.5 | Aug 20 | WordPress Altair theme <= 5.2.2 - Broken Access Control vulnerability |
| CVE-2025-15689 | CA Capella ThemeGoods | 9.8 | Aug 20 | WordPress Capella theme <= 2.5.5 - Privilege Escalation vulnerability |
| CVE-2025-15688 | CA Capella ThemeGoods | 9.3 | Aug 20 | WordPress Capella theme <= 2.5.5 - SQL Injection vulnerability |
| CVE-2026-65487 | PH Photography ThemeGoods | 5.3 | Jul 23 | WordPress Photography theme <= 7.7.6 - Broken Access Control vulnerability |
| CVE-2026-57769 | GP Grand Photography ThemeGoods | 7.1 | Jul 23 | WordPress Grand Photography theme <= 5.7.8 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2026-57770 | GP Grand Photography ThemeGoods | 9.8 | Jul 13 | WordPress Grand Photography theme <= 5.7.8 - PHP Object Injection vulnerability |
| CVE-2025-69152 | AW Artale | Wedding Photography WordPress ThemeGoods | 7.1 | Jul 2 | WordPress Artale | Wedding Photography WordPress theme <= 2.2.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-68524 | AV Avante ThemeGoods | 7.1 | Jun 17 | WordPress Avante theme < 3.0.5 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2025-69151 | GC Grand Car Rental ThemeGoods | 7.1 | Jun 16 | WordPress Grand Car Rental theme <= 3.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-39635 | GM Grand Magazine ThemeGoods | 5.4 | Apr 8 | WordPress Grand Magazine theme <= 3.5.5 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2026-39634 | GP Grand Portfolio ThemeGoods | 5.4 | Apr 8 | WordPress Grand Portfolio theme <= 3.3 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2026-39633 | GC Grand Car Rental ThemeGoods | 6.5 | Apr 8 | WordPress Grand Car Rental theme <= 3.6.9 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2026-39632 | GB Grand Blog ThemeGoods | 6.5 | Apr 8 | WordPress Grand Blog theme <= 3.1 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2026-39603 | GP Grand Photography ThemeGoods | 5.4 | Apr 8 | WordPress Grand Photography theme <= 5.7.8 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2026-27043 | PH Photography ThemeGoods | 7.2 | Mar 19 | WordPress Photography theme < 7.7.6 - Arbitrary File Upload vulnerability |
| CVE-2026-27367 | MU Musico ThemeGoods | 7.1 | Mar 5 | WordPress Musico theme < 3.4.5 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-27358 | AR Architecturer ThemeGoods | 7.1 | Mar 5 | WordPress Architecturer theme < 3.9.5 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-27353 | GN Grand News ThemeGoods | 7.1 | Mar 5 | WordPress Grand News | Magazine Newspaper WordPress theme <= 3.4.3 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2026-27352 | ST Starto ThemeGoods | 7.1 | Mar 5 | WordPress Starto theme < 2.2.5 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-27348 | PH Photography ThemeGoods | 7.1 | Mar 5 | WordPress Photography theme < 7.7.6 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-22417 | GW Grand Wedding ThemeGoods | 9.8 | Mar 5 | WordPress Grand Wedding theme < 3.1.11 - PHP Object Injection vulnerability |
| CVE-2026-24949 | PH PhotoMe ThemeGoods | 7.1 | Feb 20 | WordPress PhotoMe theme <= 5.7.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-24943 | GC Grand Conference ThemeGoods | 7.1 | Feb 20 | WordPress Grand Conference theme <= 5.3.4 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2025-69370 | CA Capella ThemeGoods | 9.8 | Feb 20 | WordPress Capella theme <= 2.5.5 - PHP Object Injection vulnerability |
| CVE-2025-69301 | PH PhotoMe ThemeGoods | 9.8 | Feb 20 | WordPress PhotoMe theme <= 5.6.11 - PHP Object Injection vulnerability |
| CVE-2026-23542 | GR Grand Restaurant ThemeGoods | 9.8 | Feb 19 | WordPress Grand Restaurant theme <= 7.0.10 - PHP Object Injection vulnerability |
| CVE-2026-24961 | GB Grand Blog ThemeGoods | 5.4 | Feb 3 | WordPress Grand Blog theme < 3.1.5 - Server Side Request Forgery (SSRF) vulnerability |
| CVE-2026-24381 | PH PhotoMe ThemeGoods | 5.4 | Jan 22 | WordPress PhotoMe theme < 5.7.2 - Server Side Request Forgery (SSRF) vulnerability |
| CVE-2025-69321 | GS Grand Spa ThemeGoods | 7.1 | Jan 22 | WordPress Grand Spa theme <= 3.5.5 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2025-69320 | GM Grand Magazine ThemeGoods | 7.1 | Jan 22 | WordPress Grand Magazine theme <= 3.5.7 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2025-68538 | CR Craft ThemeGoods | 7.1 | Jan 22 | WordPress Craft | Coffee Shop Cafe Restaurant WordPress theme <= 2.3.6 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2025-68520 | DO DotLife ThemeGoods | 7.1 | Jan 22 | WordPress DotLife theme < 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2025-68518 | HO Hoteller ThemeGoods | 7.1 | Jan 22 | WordPress Hoteller theme < 6.8.9 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2025-68510 | PH Photography ThemeGoods | 8.1 | Jan 22 | WordPress Photography theme < 7.7.5 - Local File Inclusion vulnerability |
| CVE-2025-67952 | GT Grand Tour ThemeGoods | 7.1 | Jan 22 | WordPress Grand Tour theme < 5.6.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-63026 | GR Grand Restaurant Theme Elements for Elementor ThemeGoods | 6.5 | Jan 22 | WordPress Grand Restaurant Theme Elements for Elementor plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-67922 | GR Grand Restaurant ThemeGoods | 7.1 | Jan 8 | WordPress Grand Restaurant theme < 7.0.9 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-64217 | PH Photography ThemeGoods | 7.1 | Dec 18 | WordPress Photography theme <= 7.7.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-64224 | GC Grand Conference Theme Custom Post Type ThemeGoods | 7.1 | Nov 6 | WordPress Grand Conference Theme Custom Post Type plugin < 2.6.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-60116 | GC Grand Conference Theme Custom Post Type ThemeGoods | 8.8 | Sep 26 | WordPress Grand Conference Theme Custom Post Type plugin < 2.6.4 - Broken Access Control vulnerability |
| CVE-2025-47579 | PH Photography ThemeGoods | 8.1 | Sep 9 | WordPress Photography Theme <= 7.7.2 - PHP Object Injection Vulnerability |
| CVE-2025-47584 | PH Photography ThemeGoods | 7.5 | Jun 6 | WordPress Photography theme <= 7.5.2 - PHP Object Injection vulnerability |
| CVE-2025-39485 | GT Grand Tour ThemeGoods | 9.8 | May 23 | WordPress GrandTour theme <= 5.6 - PHP Object Injection vulnerability |
| CVE-2025-32926 | GR Grand Restaurant ThemeGoods | 9.8 | May 19 | WordPress Grand Restaurant WordPress theme <= 7.0 - Path Traversal to PHP Object Injection vulnerability |
| CVE-2025-32928 | AL Altair ThemeGoods | 9.8 | May 19 | WordPress Altair theme <= 5.2.2 - PHP Object Injection vulnerability |
| CVE-2025-39348 | GR Grand Restaurant ThemeGoods | 9.8 | May 19 | WordPress Grand Restaurant WordPress theme <= 7.0 - PHP Object Injection vulnerability |
| CVE-2025-39352 | GR Grand Restaurant ThemeGoods | 8.2 | May 19 | WordPress Grand Restaurant WordPress theme <= 7.0 - Arbitrary Options Deletion vulnerability |
| CVE-2025-39354 | GC Grand Conference ThemeGoods | 9.8 | May 19 | WordPress Grand Conference theme <= 5.3 - PHP Object Injection vulnerability |
| CVE-2025-39353 | GR Grand Restaurant ThemeGoods | 5.3 | May 19 | WordPress Grand Restaurant WordPress theme <= 7.0 - Broken Access Control vulnerability |
| CVE-2025-39351 | GR Grand Restaurant ThemeGoods | 4.3 | May 19 | WordPress Grand Restaurant WordPress theme <= 7.0 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2025-30964 | PH Photography ThemeGoods | 5.4 | Apr 15 | WordPress Photography theme < 7.7.6 - Server Side Request Forgery (SSRF) vulnerability |
| CVE-2024-12922 | AL Altair ThemeGoods | 9.8 | Mar 19 | Altair <= 5.2.4 - Unauthenticated Arbitrary Options Update via pp_import_current |
| CVE-2025-22702 | PH Photography ThemeGoods | 6.3 | Feb 14 | WordPress Photography Theme <= 7.7.2 - Broken Access Control Vulnerability |