ThemeGoods Photography vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting ThemeGoods Photography: 5 record(s), with affected versions and fixes.

CVE-2026-65487 Medium · 5.3 CWE-862 Jul 23, 2026

WordPress Photography theme <= 7.7.6 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Photography <= 7.7.6 versions.

CVE-2026-27043 High · 7.2 CWE-434 Mar 19, 2026

WordPress Photography theme < 7.7.6 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in ThemeGoods Photography allows Path Traversal.This issue affects Photography: from n/a before 7.7.6.

CVE-2026-27348 High · 7.1 CWE-79 Mar 5, 2026

WordPress Photography theme < 7.7.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Photography photography allows DOM-Based XSS.This issue affects Photography: from n/a through < 7.7.6.

CVE-2025-68510 High · 8.1 CWE-98 Jan 22, 2026

WordPress Photography theme < 7.7.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeGoods Photography photography allows PHP Local File Inclusion.This issue affects Photography: from n/a through < 7.7.5.

CVE-2025-64217 High · 7.1 CWE-79 Dec 18, 2025

WordPress Photography theme <= 7.7.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Photography photography allows Reflected XSS.This issue affects Photography: from n/a through <= 7.7.2.