WordPress theme
Grand Restaurant WordPress security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the theme or restrict access to the affected feature until the vendor ships a patch.
- Critical2
- High2
- Medium4
- Low0
All Grand Restaurant WordPress vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.1 | Reflected Cross-Site Scripting <7.0.11Update to 7.0.11 | CVE-2026-94161 | |
| High8.1 | Unauthenticated PHP Object Injection ≤7.0.10Update to 7.0.11 | CVE-2026-23542 | |
| Medium6.1 | Reflected Cross-Site Scripting <7.0.9Update to 7.0.9 | CVE-2025-67922 | |
| Critical9.8 | Unauthenticated PHP Object Injection ≤7.0No patch available | CVE-2025-39348 | |
| Critical9.8 | Unauthenticated PHP Object Injection via Path Traversal ≤7.0No patch available | CVE-2025-32926 | |
| High8.2 | Missing Authorization to Unauthenticated Arbitrary Options Deletion ≤7.0No patch available | CVE-2025-39352 | |
| Medium4.3 | Cross-Site Request Forgery ≤7.0No patch available | CVE-2025-39351 | |
| Medium5.3 | Missing Authorization ≤7.0No patch available | CVE-2025-39353 |
- Medium6.1Reflected Cross-Site Scripting
<7.0.11Update to 7.0.11
- High8.1Unauthenticated PHP Object Injection
≤7.0.10Update to 7.0.11
- Medium6.1Reflected Cross-Site Scripting
<7.0.9Update to 7.0.9
- Critical9.8Unauthenticated PHP Object Injection
≤7.0No patch available
- Critical9.8Unauthenticated PHP Object Injection via Path Traversal
≤7.0No patch available
- High8.2Missing Authorization to Unauthenticated Arbitrary Options Deletion
≤7.0No patch available
- Medium4.3Cross-Site Request Forgery
≤7.0No patch available
- Medium5.3Missing Authorization
≤7.0No patch available
Grand Restaurant WordPress: common questions
Does Grand Restaurant WordPress have known vulnerabilities?
Yes. VulnCrest Radar lists 8 known vulnerabilities in Grand Restaurant WordPress: 2 critical, 2 high, 4 medium. At least one is not fixed in the latest version.
How do I check which version of Grand Restaurant WordPress I run?
In wp-admin open Appearance → Themes and select the theme; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Grand Restaurant WordPress vulnerability?
CVE-2026-94161, published Oct 4, 2026: Grand Restaurant WordPress < 7.0.11 - Reflected Cross-Site Scripting. Severity: Medium (CVSS 6.1).
Is any Grand Restaurant WordPress vulnerability listed in CISA KEV?
No. None of the known Grand Restaurant WordPress vulnerabilities is currently listed in the CISA KEV catalog.
