Known vulnerabilities in ThemeGoods Grand Tour
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-66652 | Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Tour allows Cross Site Request Forgery | 5.4 Medium | Sep 2, 2026 |
| CVE-2025-67952 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand… | 7.1 High | Jan 22, 2026 |
| CVE-2025-39485 | Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Tour grandtour allows Object Injection.This issue… | 9.8 Critical | May 23, 2025 |