PatchTheCVE: grand conferencehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-64224: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoohttps://patchthecve.com/cve/CVE-2025-64224.htmlhttps://patchthecve.com/cve/CVE-2025-64224.htmlWed, 17 Jun 2026 09:54:02 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Conference Theme Custom Post Type grandconference-custom-post allows Reflected XSS.This issue affects Grand Conference Theme Custom Post Type: from n/a through < 2.6.4.CVE-2025-60116: Missing Authorization vulnerability in ThemeGoods Grand Conference Theme Custom Post Type grandconference-custhttps://patchthecve.com/cve/CVE-2025-60116.htmlhttps://patchthecve.com/cve/CVE-2025-60116.htmlSun, 11 Oct 2026 20:10:00 +0000MEDIUM 5.4: Missing Authorization vulnerability in ThemeGoods Grand Conference Theme Custom Post Type grandconference-custom-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grand Conference Theme Custom Post Type: from n/a through < 2.6.4.CVE-2025-39354: Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Conference grandconference allows Object Ihttps://patchthecve.com/cve/CVE-2025-39354.htmlhttps://patchthecve.com/cve/CVE-2025-39354.htmlWed, 17 Jun 2026 09:17:48 +0000CRITICAL 9.8: Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Conference grandconference allows Object Injection.This issue affects Grand Conference: from n/a through <= 5.3.