CVE-2025-39354

CVE-2025-39354 (WordPress Grand Conference theme) Deserialization of untrusted data in the Grand Conference WordPress theme can lead to PHP Object Injection. Public records indicate that versions up to 5.3 are affected, with an exploit potential tied to object injection during deserialization. Th...

CVE-2025-64224

The CVE-2025-64224 entry concerns the WordPress plugin Grand Conference Theme Custom Post Type (component: grandconference-custom-post). The issue is a Reflected Cross-Site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. Affected versions range...

CVE-2025-60116

CVE-2025-60116: Missing Authorization in Grand Conference Theme Custom Post Type (WordPress). Affected software: Grand Conference Theme Custom Post Type up to version 2.6.3. Root cause: incorrectly configured access control/security levels enabling unauthorized actions on the custom post type. Ex...