5.4 Medium

CVE-2026-39634 Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Portfolio grandportfolio allows Cross Site Request…

Description

Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Portfolio grandportfolio allows Cross Site Request Forgery.This issue affects Grand Portfolio: from n/a through <= 3.3.

Affected products and versions

Product	Affected versions	Fixed in
Grand Portfolio 3.3	earliest → 3.3	No fix stated

Do you use Grand Portfolio?

Track this CVE Watch Grand Portfolio Check my SBOMs

www.cveye.io/en/cve/CVE-2026-39634

Timeline

Published April 8, 2026
Last modified April 29, 2026

References

patchstack.com patchstack.com

Track this CVE