CVE-2026-65487 Unauthenticated Broken Access Control in Photography <= 7.7.6 versions

Description

Unauthenticated Broken Access Control in Photography <= 7.7.6 versions.

Affected products and versions

Product	Affected versions	Fixed in
Photography 7.7	earliest → 7.7.6	No fix stated

Other CVEs of Photography

The 9 CVEs of Photography →

CVE-2026-27043 Unrestricted Upload of File with Dangerous Type vulnerability in ThemeGoods Photography allows Path Traversal.This issue… 7.2 High CVE-2026-27348 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods… 7.1 High CVE-2025-68510 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in… 8.1 High CVE-2025-64217 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods… 7.1 High