Themegoods Grand Restaurant — known CVE vulnerabilities

Every CVE whose affected-product data names Themegoods Grand Restaurant, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2025-32926 — CVSS 9.8 (critical): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeGoods Grand Restaurant grandrestaurant…
• CVE-2025-39348 — CVSS 9.8 (critical): Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Object Injection.This issue affects…
• CVE-2025-39352 — CVSS 8.2 (high): Missing Authorization vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Exploiting Incorrectly Configured Access Control…
• CVE-2025-67922 — CVSS 7.1 (high): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Restaurant…
• CVE-2025-39353 — CVSS 5.3 (medium): Missing Authorization vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Exploiting Incorrectly Configured Access Control…
• CVE-2025-39351 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Cross Site Request Forgery.This issue…