9.8
Critical
CVE-2025-39485 Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Tour grandtour allows Object Injection.This issue…
Description
Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Tour grandtour allows Object Injection.This issue affects Grand Tour: from n/a through <= 5.6.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Grand Tour | Travel Agency WordPress 5.5 | earliest → 5.5.1 | No fix stated |
| Grand Tour 5.6 | earliest → 5.6 | No fix stated |