ThemeGoods vulnerabilities

CVEs per yearBy the year they were published

1. 202516
2. 202641

Newest CVEs

• CVE-2026-42706

  WordPress DK theme <= 3.2.1 - Broken Access Control vulnerability

  ThemeGoods · DK

  High7.5
• CVE-2026-42705

  WordPress Grand News theme <= 3.4 - Broken Access Control vulnerability

  ThemeGoods · Grand News

  High7.5
• CVE-2026-94161

  WordPress Grand Restaurant theme < 7.0.11 - Reflected Cross Site Scripting (XSS) vulnerability

  ThemeGoods · Grand Restaurant

  High7.1
• CVE-2026-66652

  WordPress Grand Tour theme <= 5.5.1 - Cross Site Request Forgery (CSRF) vulnerability

  ThemeGoods · Grand Tour

  Medium5.4
• CVE-2025-53999

  WordPress Altair theme <= 5.2.2 - Broken Access Control vulnerability

  ThemeGoods · Altair

  Medium6.5
• CVE-2025-15689

  WordPress Capella theme <= 2.5.5 - Privilege Escalation vulnerability

  ThemeGoods · Capella

  Critical9.8
• CVE-2025-15688

  WordPress Capella theme <= 2.5.5 - SQL Injection vulnerability

  ThemeGoods · Capella

  Critical9.3
• CVE-2026-65487

  WordPress Photography theme <= 7.7.6 - Broken Access Control vulnerability

  ThemeGoods · Photography

  Medium5.3
• CVE-2026-57769

  WordPress Grand Photography theme <= 5.7.8 - Reflected Cross Site Scripting (XSS) vulnerability

  ThemeGoods · Grand Photography

  High7.1
• CVE-2026-57770

  WordPress Grand Photography theme <= 5.7.8 - PHP Object Injection vulnerability

  ThemeGoods · Grand Photography

  Critical9.8