Vendor

    ThemeGoods

    57 known vulnerabilities in products by ThemeGoods, 0 of them actively exploited (CISA KEV).

    Key figures

    57

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    14

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in ThemeGoods
    CriticalCVE-2026-57770

    WordPress Grand Photography theme <= 5.7.8 - PHP Object Injection vulnerability

    		9.8
    CriticalCVE-2025-15689

    WordPress Capella theme <= 2.5.5 - Privilege Escalation vulnerability

    		9.8
    CriticalCVE-2026-22417

    WordPress Grand Wedding theme < 3.1.11 - PHP Object Injection vulnerability

    		9.8
    CriticalCVE-2025-15688

    WordPress Capella theme <= 2.5.5 - SQL Injection vulnerability

    		9.3
    CriticalCVE-2025-39485

    WordPress GrandTour theme <= 5.6 - PHP Object Injection vulnerability

    		9.8
    CriticalCVE-2025-32926

    ThemeGoods Grand Restaurant: Path Traversal

    		9.8
    CriticalCVE-2026-23542

    WordPress Grand Restaurant theme <= 7.0.10 - PHP Object Injection vulnerability

    		9.8
    CriticalCVE-2025-69370

    WordPress Capella theme <= 2.5.5 - PHP Object Injection vulnerability

    		9.8
    CriticalCVE-2025-69301

    WordPress PhotoMe theme <= 5.6.11 - PHP Object Injection vulnerability

    		9.8
    CriticalCVE-2024-12922

    Altair <= 5.2.4 - Unauthenticated Arbitrary Options Update via pp_import_current

    		9.8
    CriticalCVE-2025-32928

    WordPress Altair theme <= 5.2.2 - PHP Object Injection vulnerability

    		9.8
    CriticalCVE-2025-39348

    WordPress Grand Restaurant WordPress theme <= 7.0 - PHP Object Injection vulnerability

    		9.8
    CriticalCVE-2025-39354

    WordPress Grand Conference theme <= 5.3 - PHP Object Injection vulnerability

    		9.8
    HighCVE-2026-42706

    WordPress DK theme <= 3.2.1 - Broken Access Control vulnerability

    		7.5
    HighCVE-2026-42705

    WordPress Grand News theme <= 3.4 - Broken Access Control vulnerability

    		7.5
    HighCVE-2025-68510

    WordPress Photography theme < 7.7.5 - Local File Inclusion vulnerability

    		8.1
    HighCVE-2026-94161

    WordPress Grand Restaurant theme < 7.0.11 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2025-53999

    WordPress Altair theme <= 5.2.2 - Broken Access Control vulnerability

    		6.5
    CriticalCVE-2025-47579

    WordPress Photography Theme <= 7.7.2 - PHP Object Injection Vulnerability

    		9.0
    HighCVE-2025-47584

    WordPress Photography theme <= 7.5.2 - PHP Object Injection vulnerability

    		8.5
    HighCVE-2026-27043

    WordPress Photography theme < 7.7.6 - Arbitrary File Upload vulnerability

    		7.2
    HighCVE-2026-57769

    WordPress Grand Photography theme <= 5.7.8 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2025-69152

    ThemeGoods Artale | Wedding Photography WordPress: Cross-site Scripting

    		7.1
    HighCVE-2025-68524

    WordPress Avante theme < 3.0.5 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2025-39352

    WordPress Grand Restaurant WordPress theme <= 7.0 - Arbitrary Options Deletion vulnerability

    		8.2

    All vulnerabilities in search

    Products

    Products by ThemeGoods
    Grand Restaurant140
    ThemeGoods Photography90
    ThemeGoods Grand Conference50
    Grand Tour40
    Grand Photography30
    ThemeGoods Altair30
    ThemeGoods Capella30
    ThemeGoods PhotoMe30