Search Results (5 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-27043 2 Themegoods, Wordpress 2 Photography, Wordpress 2026-04-08 7.2 High
Unrestricted Upload of File with Dangerous Type vulnerability in ThemeGoods Photography allows Path Traversal.This issue affects Photography: from n/a before 7.7.6.
CVE-2026-27348 2 Themegoods, Wordpress 2 Photography, Wordpress 2026-04-07 7.1 High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Photography allows DOM-Based XSS.This issue affects Photography: from n/a before 7.7.6.
CVE-2025-47579 2 Themegoods, Wordpress 2 Photography, Wordpress 2026-04-01 8.1 High
Deserialization of Untrusted Data vulnerability in ThemeGoods Photography photography allows Object Injection.This issue affects Photography: from n/a through <= 7.7.2.
CVE-2025-64217 2 Themegoods, Wordpress 2 Photography, Wordpress 2026-04-01 7.1 High
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Photography photography allows Reflected XSS.This issue affects Photography: from n/a through <= 7.7.2.
CVE-2025-47584 1 Themegoods 1 Photography 2026-01-22 8.5 High
Deserialization of Untrusted Data vulnerability in ThemeGoods Photography.This issue affects Photography: from n/a through 7.5.2.