Lucene search
+L

37 matches found

RedhatCVE
RedhatCVE
added 2025/09/27 8:44 a.m.18 views

CVE-2025-60116

Missing Authorization vulnerability in ThemeGoods Grand Conference Theme Custom Post Type grandconference-custom-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grand Conference Theme Custom Post Type: from n/a through 2.6.4...

8.8CVSS5.9AI score0.00278EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/09/26 9:53 a.m.11 views

WordPress Grand Conference Theme Custom Post Type plugin < 2.6.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Bonds in WordPress Plugin Grand Conference Theme Custom Post Type versions 2.6.4...

8.8CVSS6.9AI score0.00278EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/09/26 9:15 a.m.7 views

CVE-2025-60116

Missing Authorization vulnerability in ThemeGoods Grand Conference Theme Custom Post Type grandconference-custom-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grand Conference Theme Custom Post Type: from n/a through 2.6.4...

8.8CVSS0.00278EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/26 9:15 a.m.14 views

CVE-2025-60116

Missing Authorization vulnerability in ThemeGoods Grand Conference Theme Custom Post Type allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Grand Conference Theme Custom Post Type: from n/a through 2.6.3...

8.8CVSS5.8AI score0.00278EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/26 8:31 a.m.20 views

CVE-2025-60116

CVE-2025-60116: Missing Authorization in Grand Conference Theme Custom Post Type (WordPress). Affected software: Grand Conference Theme Custom Post Type up to version 2.6.3. Root cause: incorrectly configured access control/security levels enabling unauthorized actions on the custom post type. Ex...

8.8CVSS5.9AI score0.00278EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/09/26 8:31 a.m.15 views

CVE-2025-60116 WordPress Grand Conference Theme Custom Post Type plugin < 2.6.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeGoods Grand Conference Theme Custom Post Type grandconference-custom-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grand Conference Theme Custom Post Type: from n/a through 2.6.4...

5.4CVSS0.00278EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/26 8:31 a.m.4 views

CVE-2025-60116 WordPress Grand Conference Theme Custom Post Type plugin < 2.6.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeGoods Grand Conference Theme Custom Post Type grandconference-custom-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grand Conference Theme Custom Post Type: from n/a through 2.6.4...

5.4CVSS5.9AI score0.00278EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/09/26 12:00 a.m.15 views

WordPress plugin Grand Conference Theme Custom Post Type security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...

8.8CVSS5.8AI score0.00278EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/09/26 12:00 a.m.9 views

PT-2025-39563

Name of the Vulnerable Software and Affected Versions ThemeGoods Grand Conference Theme Custom Post Type versions through 2.6.3 Description An authorization issue exists in the ThemeGoods Grand Conference Theme Custom Post Type. The problem stems from incorrectly configured access control securit...

8.8CVSS5.9AI score0.00278EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/05/21 8:23 p.m.13 views

CVE-2025-39354

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Conference grandconference allows Object Injection.This issue affects Grand Conference: from n/a through = 5.3...

9.8CVSS7.2AI score0.00465EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/19 8:15 p.m.17 views

CVE-2025-39354

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Conference grandconference allows Object Injection.This issue affects Grand Conference: from n/a through = 5.3...

9.8CVSS0.00465EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/19 7:48 p.m.27 views

CVE-2025-39354 WordPress Grand Conference theme <= 5.3 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Conference grandconference allows Object Injection.This issue affects Grand Conference: from n/a through = 5.3...

9.8CVSS0.00465EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/19 7:48 p.m.46 views

CVE-2025-39354

CVE-2025-39354 (WordPress Grand Conference theme) Deserialization of untrusted data in the Grand Conference WordPress theme can lead to PHP Object Injection. Public records indicate that versions up to 5.3 are affected, with an exploit potential tied to object injection during deserialization. Th...

9.8CVSS7.2AI score0.00465EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/19 7:48 p.m.10 views

CVE-2025-39354 WordPress Grand Conference theme <= 5.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Conference allows Object Injection.This issue affects Grand Conference: from n/a through 5.2...

9.8CVSS6.9AI score0.00465EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/19 12:00 a.m.24 views

WordPress plugin Grand Conference 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

9.8CVSS8.6AI score0.00465EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/19 12:00 a.m.13 views

PT-2025-22095 · Unknown · Grand Conference

Name of the Vulnerable Software and Affected Versions: Grand Conference versions 5.2 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This can potentially be exploited to execute malicious actions. Recommendations: For versions 5.2...

9.8CVSS9.2AI score0.00465EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2025/05/13 11:13 a.m.13 views

WordPress Grand Conference Theme Custom Post Type plugin < 2.6.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Bonds in WordPress Plugin Grand Conference Theme Custom Post Type versions 2.6.4...

7.1CVSS6.1AI score0.00178EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder