CVE-2026-39603 is a CSRF vulnerability affecting ThemeGoods Grand Photography through version 5.7.8. The vulnerability allows an attacker to trick authenticated users into submitting unauthorized requests, potentially leading to limited integrity and availability impacts. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact.

The vulnerability could allow attackers to perform unauthorized actions on behalf of authenticated users, potentially causing limited integrity and availability impacts. There is no confidentiality impact reported. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as verifying anti-CSRF tokens or restricting sensitive actions to POST requests with proper validation.