CVE-2026-39633

MediumCVSS 6.5

Published: 08/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

Summary

CSRF vulnerability in Grand Car Rental (grandcarrental) theme up to version 3.6.9 inclusive. Allows Cross-Site Request Forgery.

Risk Assessment

An attacker can use CSRF to perform unauthorized actions in the context of an administrator, such as modifying bookings.

Recommendation

Update the Grand Car Rental theme to a version above 3.6.9 where the vulnerability is fixed.

Original NVD description (English source)

Cross-Site Request Forgery (CSRF) vulnerability in ThemeGoods Grand Car Rental grandcarrental allows Cross Site Request Forgery.This issue affects Grand Car Rental: from n/a through <= 3.6.9.