CVE Intelligence

ThemeGoods Grand News vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting ThemeGoods Grand News: 2 record(s), with affected versions and fixes.

CVE-2026-42705 High · 7.5 CWE-862 Oct 10, 2026
WordPress Grand News theme <= 3.4 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Grand News <= 3.4 versions.
CVE-2026-27353 High · 7.1 CWE-79 Mar 5, 2026
WordPress Grand News | Magazine Newspaper WordPress theme <= 3.4.3 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand News grandnews allows Reflected XSS.This issue affects Grand News: from n/a through <= 3.4.3.