9.8
Critical
CVE-2025-39348 Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Object…
Description
Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Object Injection.This issue affects Grand Restaurant: from n/a through <= 7.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Grand Restaurant WordPress 7.0 | earliest → 7.0 | No fix stated |
| Grand Restaurant 7.0 | earliest → 7.0 | No fix stated |
Other CVEs of Grand Restaurant WordPress
The 5 CVEs of Grand Restaurant WordPress →
CVE-2025-32926
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeGoods Grand…
9.8
Critical
CVE-2025-39352
Missing Authorization vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Exploiting Incorrectly…
8.2
High
CVE-2025-39353
Missing Authorization vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Exploiting Incorrectly…
5.3
Medium
CVE-2025-39351
Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Cross Site Request…
4.3
Medium