Approved changes feed: RSS · Atom

cpe:2.3:a:themegoods:photography:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorThemegoods (f2142911-7c1b-5431-a8f8-8245a5d1b792)
ProductPhotography (08be6ae0-871d-5c22-8098-af18779a97fd)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-64217 vulnerable 2026-06-03 15:09:37.493526 WordPress Photography theme <= 7.7.2 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Photography photography allows Reflected XSS.This issue affects Photography: from n/a through <= 7.7.2.
Published: 2025-12-18T07:22:12.346Z
Updated: 2026-04-28T18:25:36.356Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47584 vulnerable 2026-06-03 15:01:33.024458 WordPress Photography theme <= 7.5.2 - PHP Object Injection vulnerability
HIGH (8.5)
Deserialization of Untrusted Data vulnerability in ThemeGoods Photography.This issue affects Photography: from n/a through 7.5.2.
Published: 2025-06-06T11:45:34.759Z
Updated: 2026-04-28T16:12:45.849Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47579 vulnerable 2026-06-03 15:01:33.013878 WordPress Photography Theme <= 7.7.2 - PHP Object Injection Vulnerability
CRITICAL (9)
Deserialization of Untrusted Data vulnerability in ThemeGoods Photography photography allows Object Injection.This issue affects Photography: from n/a through <= 7.7.2.
Published: 2025-09-09T16:25:26.385Z
Updated: 2026-04-28T16:12:45.844Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.