| CVE-2026-65487 |
Unauthenticated Broken Access Control in Photography <= 7.7.6 versions
|
5.3
Medium
|
Jul 23, 2026 |
| CVE-2026-27043 |
Unrestricted Upload of File with Dangerous Type vulnerability in ThemeGoods Photography allows Path Traversal.This issue…
|
7.2
High
|
Mar 19, 2026 |
| CVE-2026-27348 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods…
|
7.1
High
|
Mar 5, 2026 |
| CVE-2025-68510 |
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
|
8.1
High
|
Jan 22, 2026 |
| CVE-2025-64217 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods…
|
7.1
High
|
Dec 18, 2025 |
| CVE-2025-47579 |
Deserialization of Untrusted Data vulnerability in ThemeGoods Photography photography allows Object Injection.This issue…
|
9.0
Critical
|
Sep 9, 2025 |
| CVE-2025-47584 |
Deserialization of Untrusted Data vulnerability in ThemeGoods Photography.This issue affects Photography: from n/a…
|
8.5
High
|
Jun 6, 2025 |
| CVE-2025-30964 |
Server-Side Request Forgery (SSRF) vulnerability in ThemeGoods Photography photography allows Server Side Request…
|
5.4
Medium
|
Apr 15, 2025 |
| CVE-2025-22702 |
Missing Authorization vulnerability in ThemeGoods Photography photography allows Exploiting Incorrectly Configured…
|
6.3
Medium
|
Feb 14, 2025 |