CVE-2026-22417: Themegoods Grand Wedding

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Wedding grandwedding allows Object Injection.This issue affects Grand Wedding: from n/a through < 3.1.11.

Affected products

• Themegoods Grand Wedding: up to and including 3.1.11

Published 2026-03-05. Last modified 2026-06-17.