Log in Start free

ThemeGoods

Products

ProductCVEsExploitedLatest
Photography9–Jul 23, 2026
Grand Restaurant8–Oct 9, 2026
Altair3–Aug 20, 2026
Capella3–Aug 20, 2026
Grand Photography3–Jul 23, 2026
Grand Tour3–Sep 2, 2026
PhotoMe3–Feb 20, 2026
Grand News2–Oct 10, 2026
Grand Blog2–Apr 8, 2026
Grand Car Rental2–Jun 16, 2026
Grand Conference2–Feb 20, 2026
Grand Conference Theme Custom Post Type2–Nov 6, 2025
Grand Magazine2–Apr 8, 2026
DotLife1–Jan 22, 2026
DK1–Oct 10, 2026
Grand Portfolio1–Apr 8, 2026
Craft1–Jan 22, 2026
Grand Restaurant Theme Elements for Elementor1–Jan 22, 2026
Grand Spa1–Jan 22, 2026
Avante1–Jun 17, 2026
Grand Wedding1–Mar 5, 2026
Hoteller1–Jan 22, 2026
Musico1–Mar 5, 2026
Artale | Wedding Photography WordPress1–Jul 2, 2026
Architecturer1–Mar 5, 2026
Starto1–Mar 5, 2026

Exploited and recent CVEs

  • CVE-2026-42706 High 7.5 WordPress DK theme <= 3.2.1 - Broken Access Control vulnerability 0.2%
  • CVE-2026-42705 High 7.5 WordPress Grand News theme <= 3.4 - Broken Access Control vulnerability 0.2%
  • CVE-2026-94161 High 7.1 WordPress Grand Restaurant theme < 7.0.11 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-66652 Medium 5.4 WordPress Grand Tour theme <= 5.5.1 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-53999 Medium 6.5 WordPress Altair theme <= 5.2.2 - Broken Access Control vulnerability 0.3%
  • CVE-2025-15689 Critical 9.8 WordPress Capella theme <= 2.5.5 - Privilege Escalation vulnerability 0.5%
  • CVE-2025-15688 Critical 9.3 WordPress Capella theme <= 2.5.5 - SQL Injection vulnerability 0.4%
  • CVE-2026-65487 Medium 5.3 WordPress Photography theme <= 7.7.6 - Broken Access Control vulnerability 0.3%
  • CVE-2026-57769 High 7.1 WordPress Grand Photography theme <= 5.7.8 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-57770 Critical 9.8 WordPress Grand Photography theme <= 5.7.8 - PHP Object Injection vulnerability 0.6%
  • CVE-2025-69152 High 7.1 WordPress Artale | Wedding Photography WordPress theme <= 2.2.2 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-68524 High 7.1 WordPress Avante theme < 3.0.5 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-69151 High 7.1 WordPress Grand Car Rental theme <= 3.7 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-39635 Medium 5.4 WordPress Grand Magazine theme <= 3.5.5 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2026-39634 Medium 5.4 WordPress Grand Portfolio theme <= 3.3 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2026-39633 Medium 6.5 WordPress Grand Car Rental theme <= 3.6.9 - Cross Site Request Forgery (CSRF) vulnerability <0.1%
  • CVE-2026-39632 Medium 6.5 WordPress Grand Blog theme <= 3.1 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2026-39603 Medium 5.4 WordPress Grand Photography theme <= 5.7.8 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2026-27043 High 7.2 WordPress Photography theme < 7.7.6 - Arbitrary File Upload vulnerability 0.4%
  • CVE-2026-27367 High 7.1 WordPress Musico theme < 3.4.5 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-27358 High 7.1 WordPress Architecturer theme < 3.9.5 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-27353 High 7.1 WordPress Grand News | Magazine Newspaper WordPress theme <= 3.4.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-27352 High 7.1 WordPress Starto theme < 2.2.5 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-27348 High 7.1 WordPress Photography theme < 7.7.6 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-22417 Critical 9.8 WordPress Grand Wedding theme < 3.1.11 - PHP Object Injection vulnerability 0.6%
  • CVE-2026-24949 High 7.1 WordPress PhotoMe theme <= 5.7.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-24943 High 7.1 WordPress Grand Conference theme <= 5.3.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-69370 Critical 9.8 WordPress Capella theme <= 2.5.5 - PHP Object Injection vulnerability 0.4%
  • CVE-2025-69301 Critical 9.8 WordPress PhotoMe theme <= 5.6.11 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-23542 Critical 9.8 WordPress Grand Restaurant theme <= 7.0.10 - PHP Object Injection vulnerability 0.5%