Themegoods Grand News vulnerabilities

2 CVEs affecting Themegoods Grand News, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-42705, published 2026-10-10.

More from Themegoods.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-27353, published 2026-03-05. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand News grandnews allows Reflected XSS.This issue affects Grand News: from n/a…
• CVE-2026-42705, published 2026-10-10. High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days. Unauthenticated Broken Access Control in Grand News <= 3.4 versions.