8.2
High
CVE-2025-39352 Missing Authorization vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Exploiting Incorrectly…
Description
Missing Authorization vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grand Restaurant: from n/a through <= 7.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Grand Restaurant WordPress 7.0 | earliest → 7.0 | No fix stated |
| Grand Restaurant 7.0 | earliest → 7.0 | No fix stated |
Other CVEs of Grand Restaurant WordPress
The 5 CVEs of Grand Restaurant WordPress →
CVE-2025-32926
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeGoods Grand…
9.8
Critical
CVE-2025-39348
Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Object…
9.8
Critical
CVE-2025-39353
Missing Authorization vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Exploiting Incorrectly…
5.3
Medium
CVE-2025-39351
Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Cross Site Request…
4.3
Medium