CVE-2025-39351

Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Restaurant WordPress allows Cross Site Request Forgery.This issue affects Grand Restaurant WordPress: from n/a through 7.0.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://patchstack.com/database/wordpress/theme/grandrestaurant/vulnerability/wordpress-grand-restaurant-wordpress-theme-7-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:themegoods:grand_restaurant:*:*:*:*:*:wordpress:*:*

History

22 Jan 2026, 21:31

Type	Values Removed	Values Added
CPE		cpe:2.3:a:themegoods:grand_restaurant::::::wordpress::*
First Time		Themegoods Themegoods grand Restaurant
References	~~() https://patchstack.com/database/wordpress/theme/grandrestaurant/vulnerability/wordpress-grand-restaurant-wordpress-theme-7-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve -~~	() https://patchstack.com/database/wordpress/theme/grandrestaurant/vulnerability/wordpress-grand-restaurant-wordpress-theme-7-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve - Third Party Advisory

21 May 2025, 20:25

Type	Values Removed	Values Added
Summary		(es) La vulnerabilidad de Cross-Site Request Forgery (CSRF) en ThemeGoods Grand Restaurant WordPress permite Cross-Site Request Forgery. Este problema afecta a Grand Restaurant WordPress: desde n/a hasta 7.0.

19 May 2025, 17:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-05-19 17:15

Updated : 2026-01-22 21:31

NVD link : CVE-2025-39351

Mitre link : CVE-2025-39351

CVE.ORG link : CVE-2025-39351

JSON object : View

Products Affected

themegoods

grand_restaurant

CWE

CWE-352

Cross-Site Request Forgery (CSRF)

4.3 /10