5.4 Medium

CVE-2025-60116 Missing Authorization vulnerability in ThemeGoods Grand Conference Theme Custom Post Type grandconference-custom-post…

Description

Missing Authorization vulnerability in ThemeGoods Grand Conference Theme Custom Post Type grandconference-custom-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grand Conference Theme Custom Post Type: from n/a through < 2.6.4.

Affected products and versions

Product	Affected versions	Fixed in
Grand Conference Theme Custom Post Type 2.6	earliest → 2.6.4	No fix stated

The 2 CVEs of Grand Conference Theme Custom Post Type →

CVE-2025-64224 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand… 7.1 High

Do you use Grand Conference Theme Custom Post Type?

Track this CVE Watch Grand Conference Theme Custom Post Type Check my SBOMs

www.cveye.io/en/cve/CVE-2025-60116

Timeline

Published September 26, 2025
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE

CVE-2025-60116 Missing Authorization vulnerability in ThemeGoods Grand Conference Theme Custom Post Type grandconference-custom-post…

Description

Affected products and versions

Other CVEs of Grand Conference Theme Custom Post Type