ThemeGoods PhotoMe vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting ThemeGoods PhotoMe: 3 record(s), with affected versions and fixes.

CVE-2026-24949 High · 7.1 CWE-79 Feb 20, 2026

WordPress PhotoMe theme <= 5.7.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods PhotoMe photome allows DOM-Based XSS.This issue affects PhotoMe: from n/a through <= 5.7.1.

CVE-2025-69301 Critical · 9.8 CWE-502 Feb 20, 2026

WordPress PhotoMe theme <= 5.6.11 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeGoods PhotoMe photome allows Object Injection.This issue affects PhotoMe: from n/a through <= 5.6.11.

CVE-2026-24381 Medium · 5.4 CWE-918 Jan 22, 2026

WordPress PhotoMe theme < 5.7.2 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery (SSRF) vulnerability in ThemeGoods PhotoMe photome allows Server Side Request Forgery.This issue affects PhotoMe: from n/a through < 5.7.2.