4.3
Medium
CVE-2025-39351 Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Cross Site Request…
Description
Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Cross Site Request Forgery.This issue affects Grand Restaurant: from n/a through <= 7.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Grand Restaurant WordPress 7.0 | earliest → 7.0 | No fix stated |
| Grand Restaurant 7.0 | earliest → 7.0 | No fix stated |
Other CVEs of Grand Restaurant WordPress
The 5 CVEs of Grand Restaurant WordPress →
CVE-2025-32926
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeGoods Grand…
9.8
Critical
CVE-2025-39348
Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Object…
9.8
Critical
CVE-2025-39352
Missing Authorization vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Exploiting Incorrectly…
8.2
High
CVE-2025-39353
Missing Authorization vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Exploiting Incorrectly…
5.3
Medium