Themegoods vulnerabilities
57 CVEs and advisories name Themegoods as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-24961WordPress Grand Blog theme < 3.1.5 - Server Side Request Forgery (SSRF) vulnerability
- CVE-2026-24381WordPress PhotoMe theme < 5.7.2 - Server Side Request Forgery (SSRF) vulnerability
- CVE-2025-69321WordPress Grand Spa theme <= 3.5.5 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2025-69320WordPress Grand Magazine theme <= 3.5.7 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2025-68538WordPress Craft | Coffee Shop Cafe Restaurant WordPress theme <= 2.3.6 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2025-68520WordPress DotLife theme < 4.9.5 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2025-68518WordPress Hoteller theme < 6.8.9 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2025-68510WordPress Photography theme < 7.7.5 - Local File Inclusion vulnerability
- CVE-2025-67952WordPress Grand Tour theme < 5.6.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-63026WordPress Grand Restaurant Theme Elements for Elementor plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-67922WordPress Grand Restaurant theme < 7.0.9 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-64217WordPress Photography theme <= 7.7.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-64224WordPress Grand Conference Theme Custom Post Type plugin < 2.6.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-60116WordPress Grand Conference Theme Custom Post Type plugin < 2.6.4 - Broken Access Control vulnerability
- CVE-2025-47579WordPress Photography Theme <= 7.7.2 - PHP Object Injection Vulnerability
- CVE-2025-47584WordPress Photography theme <= 7.5.2 - PHP Object Injection vulnerability
- CVE-2025-39485WordPress GrandTour theme <= 5.6 - PHP Object Injection vulnerability
- CVE-2025-32926WordPress Grand Restaurant WordPress theme <= 7.0 - Path Traversal to PHP Object Injection vulnerability
- CVE-2025-32928WordPress Altair theme <= 5.2.2 - PHP Object Injection vulnerability
- CVE-2025-39348WordPress Grand Restaurant WordPress theme <= 7.0 - PHP Object Injection vulnerability
- CVE-2025-39352WordPress Grand Restaurant WordPress theme <= 7.0 - Arbitrary Options Deletion vulnerability
- CVE-2025-39354WordPress Grand Conference theme <= 5.3 - PHP Object Injection vulnerability
- CVE-2025-39353WordPress Grand Restaurant WordPress theme <= 7.0 - Broken Access Control vulnerability
- CVE-2025-39351WordPress Grand Restaurant WordPress theme <= 7.0 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2025-30964WordPress Photography theme < 7.7.6 - Server Side Request Forgery (SSRF) vulnerability
- CVE-2024-12922Altair <= 5.2.4 - Unauthenticated Arbitrary Options Update via pp_import_current
- CVE-2025-22702WordPress Photography Theme <= 7.7.2 - Broken Access Control Vulnerability