CVE-2025-39348

CVE-2025-39348 affects the WordPress Grand Restaurant WordPress theme, version 7.0 and earlier. The issue is Deserialization of Untrusted Data leading to PHP Object Injection, per public records. CVSS 3.1 base score 9.8 (CRITICAL) with network attack vector, no user interaction, and high impact o...

CVE-2025-39353

CVE-2025-39353 affects Grand Restaurant WordPress Theme, versions ≤ 7.0. The issue is described as a Missing Authorization/Broken Access Control vulnerability, enabling exploitation due to incorrectly configured access controls. Public sources in the provided documents indicate this is a low-seve...

CVE-2025-39352

CVE-2025-39352 affects Grand Restaurant WordPress theme

CVE-2025-32926

CVE-2025-32926 affects ThemeGoods Grand Restaurant WordPress theme

CVE-2025-39351

CVE-2025-39351: Cross-Site Request Forgery in Grand Restaurant WordPress theme (versions <= 7.0). Affects WordPress Grand Restaurant theme; CSRF vulnerability reported with unauthenticated access and potential for unauthorized actions as described in Patchstack/Red Hat/NVD entries. The Patchst...

CVE-2025-67922

CVE-2025-67922 is a Reflected XSS in the Grand Restaurant WordPress Theme. Affected versions are before 7.0.9 and the vulnerability arises from improper neutralization of input during web page generation, enabling an attacker to reflect script in affected pages. Wordfence reports the issue in the...