https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-67922.htmlhttps://patchthecve.com/cve/CVE-2025-67922.htmlWed, 07 Oct 2026 09:10:00 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Reflected XSS.This issue affects Grand Restaurant: from n/a through < 7.0.9.https://patchthecve.com/cve/CVE-2025-64217.htmlhttps://patchthecve.com/cve/CVE-2025-64217.htmlWed, 17 Jun 2026 09:54:02 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Photography photography allows Reflected XSS.This issue affects Photography: from n/a through <= 7.7.2.https://patchthecve.com/cve/CVE-2025-64224.htmlhttps://patchthecve.com/cve/CVE-2025-64224.htmlWed, 17 Jun 2026 09:54:02 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Conference Theme Custom Post Type grandconference-custom-post allows Reflected XSS.This issue affects Grand Conference Theme Custom Post Type: from n/a through < 2.6.4.https://patchthecve.com/cve/CVE-2025-60116.htmlhttps://patchthecve.com/cve/CVE-2025-60116.htmlSun, 11 Oct 2026 20:10:00 +0000MEDIUM 5.4: Missing Authorization vulnerability in ThemeGoods Grand Conference Theme Custom Post Type grandconference-custom-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grand Conference Theme Custom Post Type: from n/a through < 2.6.4.https://patchthecve.com/cve/CVE-2025-47579.htmlhttps://patchthecve.com/cve/CVE-2025-47579.htmlWed, 17 Jun 2026 09:28:20 +0000CRITICAL 9.0: Deserialization of Untrusted Data vulnerability in ThemeGoods Photography photography allows Object Injection.This issue affects Photography: from n/a through <= 7.7.2.https://patchthecve.com/cve/CVE-2025-47584.htmlhttps://patchthecve.com/cve/CVE-2025-47584.htmlWed, 17 Jun 2026 09:28:21 +0000HIGH 8.5: Deserialization of Untrusted Data vulnerability in ThemeGoods Photography.This issue affects Photography: from n/a through 7.5.2.https://patchthecve.com/cve/CVE-2025-39485.htmlhttps://patchthecve.com/cve/CVE-2025-39485.htmlWed, 17 Jun 2026 09:18:02 +0000CRITICAL 9.8: Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Tour grandtour allows Object Injection.This issue affects Grand Tour: from n/a through <= 5.6.https://patchthecve.com/cve/CVE-2025-39354.htmlhttps://patchthecve.com/cve/CVE-2025-39354.htmlWed, 17 Jun 2026 09:17:48 +0000CRITICAL 9.8: Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Conference grandconference allows Object Injection.This issue affects Grand Conference: from n/a through <= 5.3.https://patchthecve.com/cve/CVE-2025-39352.htmlhttps://patchthecve.com/cve/CVE-2025-39352.htmlWed, 17 Jun 2026 09:17:48 +0000HIGH 8.2: Missing Authorization vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grand Restaurant: from n/a through <= 7.0.https://patchthecve.com/cve/CVE-2025-39348.htmlhttps://patchthecve.com/cve/CVE-2025-39348.htmlWed, 17 Jun 2026 09:17:48 +0000CRITICAL 9.8: Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Object Injection.This issue affects Grand Restaurant: from n/a through <= 7.0.https://patchthecve.com/cve/CVE-2025-32928.htmlhttps://patchthecve.com/cve/CVE-2025-32928.htmlWed, 17 Jun 2026 09:12:49 +0000CRITICAL 9.8: Deserialization of Untrusted Data vulnerability in ThemeGoods Altair altair allows Object Injection.This issue affects Altair: from n/a through <= 5.2.2.https://patchthecve.com/cve/CVE-2025-32926.htmlhttps://patchthecve.com/cve/CVE-2025-32926.htmlWed, 17 Jun 2026 09:12:49 +0000CRITICAL 9.8: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Path Traversal.This issue affects Grand Restaurant: from n/a through <= 7.0.https://patchthecve.com/cve/CVE-2025-39353.htmlhttps://patchthecve.com/cve/CVE-2025-39353.htmlWed, 17 Jun 2026 09:17:48 +0000MEDIUM 5.3: Missing Authorization vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grand Restaurant: from n/a through <= 7.0.https://patchthecve.com/cve/CVE-2025-39351.htmlhttps://patchthecve.com/cve/CVE-2025-39351.htmlWed, 17 Jun 2026 09:17:48 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Cross Site Request Forgery.This issue affects Grand Restaurant: from n/a through <= 7.0.