| CVE-2026-65487 |
Unauthenticated Broken Access Control in Photography <= 7.7.6 versions
|
5.3
Moyenne
|
23 juil. 2026 |
| CVE-2026-27043 |
Unrestricted Upload of File with Dangerous Type vulnerability in ThemeGoods Photography allows Path Traversal.This issue…
|
7.2
Élevée
|
19 mars 2026 |
| CVE-2026-27348 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods…
|
7.1
Élevée
|
5 mars 2026 |
| CVE-2025-68510 |
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
|
8.1
Élevée
|
22 janv. 2026 |
| CVE-2025-64217 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods…
|
7.1
Élevée
|
18 déc. 2025 |
| CVE-2025-47579 |
Deserialization of Untrusted Data vulnerability in ThemeGoods Photography photography allows Object Injection.This issue…
|
9.0
Critique
|
9 sept. 2025 |
| CVE-2025-47584 |
Deserialization of Untrusted Data vulnerability in ThemeGoods Photography.This issue affects Photography: from n/a…
|
8.5
Élevée
|
6 juin 2025 |
| CVE-2025-30964 |
Server-Side Request Forgery (SSRF) vulnerability in ThemeGoods Photography photography allows Server Side Request…
|
5.4
Moyenne
|
15 avr. 2025 |
| CVE-2025-22702 |
Missing Authorization vulnerability in ThemeGoods Photography photography allows Exploiting Incorrectly Configured…
|
6.3
Moyenne
|
14 févr. 2025 |