CVE-2025-64224 – WordPress Grand Conference Theme Custom Post Type plugin < 2.6.4 – Cross Site Scripting (XSS) vulnerability

CVE ID : CVE-2025-64224

Published : Nov. 6, 2025, 4:16 p.m. | 1 hour, 13 minutes ago

Description : Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in ThemeGoods Grand Conference Theme Custom Post Type grandconference-custom-post allows Reflected XSS.This issue affects Grand Conference Theme Custom Post Type: from n/a through
Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…