GCVE - cpe:2.3:a:themegoods:photography:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:themegoods:photography:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Themegoods (`f2142911-7c1b-5431-a8f8-8245a5d1b792`)
Product	Photography (`08be6ae0-871d-5c22-8098-af18779a97fd`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-27348`	vulnerable	2026-06-03 15:18:06.384038	WordPress Photography theme < 7.7.6 - Cross Site Scripting (XSS) vulnerability HIGH (7.1) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Photography photography allows DOM-Based XSS.This issue affects Photography: from n/a through < 7.7.6. Published: 2026-03-05T05:53:53.365Z Updated: 2026-04-28T16:15:02.156Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Theme/photography/vulnerability/wordpress-photography-theme-7-6-1-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-27043`	vulnerable	2026-06-03 15:18:05.921579	WordPress Photography theme < 7.7.6 - Arbitrary File Upload vulnerability HIGH (7.2) Unrestricted Upload of File with Dangerous Type vulnerability in ThemeGoods Photography allows Path Traversal.This issue affects Photography: from n/a before 7.7.6. Published: 2026-03-19T14:49:20.612Z Updated: 2026-04-28T16:14:59.730Z Open on db.gcve.eu Reference links https://patchstack.com/database/wordpress/theme/photography/vulnerability/wordpress-photography-theme-7-7-5-arbitrary-file-upload-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-68510`	vulnerable	2026-06-03 15:11:03.425939	WordPress Photography theme < 7.7.5 - Local File Inclusion vulnerability HIGH (8.1) Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeGoods Photography photography allows PHP Local File Inclusion.This issue affects Photography: from n/a through < 7.7.5. Published: 2026-01-22T16:52:07.647Z Updated: 2026-04-28T19:59:53.707Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Theme/photography/vulnerability/wordpress-photography-theme-7-7-5-local-file-inclusion-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-64217`	vulnerable	2026-06-03 15:09:37.492160	WordPress Photography theme <= 7.7.2 - Cross Site Scripting (XSS) vulnerability HIGH (7.1) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Photography photography allows Reflected XSS.This issue affects Photography: from n/a through <= 7.7.2. Published: 2025-12-18T07:22:12.346Z Updated: 2026-04-28T18:25:36.356Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Theme/photography/vulnerability/wordpress-photography-theme-7-7-2-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-47584`	vulnerable	2026-06-03 15:01:33.024417	WordPress Photography theme <= 7.5.2 - PHP Object Injection vulnerability HIGH (8.5) Deserialization of Untrusted Data vulnerability in ThemeGoods Photography.This issue affects Photography: from n/a through 7.5.2. Published: 2025-06-06T11:45:34.759Z Updated: 2026-04-28T16:12:45.849Z Open on db.gcve.eu Reference links https://patchstack.com/database/wordpress/theme/photography/vulnerability/wordpress-photography-theme-7-5-2-php-object-injection-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-47579`	vulnerable	2026-06-03 15:01:33.012034	WordPress Photography Theme <= 7.7.2 - PHP Object Injection Vulnerability CRITICAL (9) Deserialization of Untrusted Data vulnerability in ThemeGoods Photography photography allows Object Injection.This issue affects Photography: from n/a through <= 7.7.2. Published: 2025-09-09T16:25:26.385Z Updated: 2026-04-28T16:12:45.844Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Theme/photography/vulnerability/wordpress-photography-theme-7-5-2-unauthenticated-php-object-injection-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-30964`	vulnerable	2026-06-03 15:00:29.926588	WordPress Photography theme < 7.7.6 - Server Side Request Forgery (SSRF) vulnerability MEDIUM (5.4) Server-Side Request Forgery (SSRF) vulnerability in ThemeGoods Photography photography allows Server Side Request Forgery.This issue affects Photography: from n/a through < 7.7.6. Published: 2025-04-15T11:59:07.576Z Updated: 2026-04-28T16:12:02.151Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Theme/photography/vulnerability/wordpress-photography-theme-7-5-2-server-side-request-forgery-ssrf-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-22702`	vulnerable	2026-06-03 14:59:41.216260	WordPress Photography Theme <= 7.7.2 - Broken Access Control Vulnerability MEDIUM (6.3) Missing Authorization vulnerability in ThemeGoods Photography photography allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Photography: from n/a through <= 7.7.2. Published: 2025-02-14T12:45:33.498Z Updated: 2026-05-11T23:34:57.319Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Theme/photography/vulnerability/wordpress-photography-theme-7-5-2-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.