ThemeGoods Grand Tour

• CVE-2026-66652 Medium 5.4 WordPress Grand Tour theme <= 5.5.1 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
• CVE-2025-67952 High 7.1 WordPress Grand Tour theme < 5.6.2 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2025-39485 Critical 9.8 WordPress GrandTour theme <= 5.6 - PHP Object Injection vulnerability 0.6%