Read the docs

ThemeGoods

Records57All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical14CVSS 9.0–10.0
CVSS high28CVSS 7.0–8.9

Exploited now

ThemeGoods records in CISA KEV

No ThemeGoods vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Grand Restaurant 6 records MEDIUM Grand Conference 3 records MEDIUM Photography 3 records MEDIUM Altair 1 record MEDIUM Grand Tour 1 record MEDIUM

Records

3 records in Photography · all components

TI-2025-30076 CVE-2025-47579 · GHSA-qf54-mr3w-jmww

WordPress Photography Theme <= 7.7.2 - PHP Object Injection Vulnerability

Priority MEDIUM 41

Deserialization of Untrusted Data vulnerability in ThemeGoods Photography photography allows Object Injection.This issue affects Photography: from n/a through <= 7.7.2.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00325 Published 2025-09-09 No fix listed CWE-502
TI-2025-39660 CVE-2025-64217 · GHSA-r65w-qfqm-5mfj

WordPress Photography theme <= 7.7.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Photography photography allows Reflected XSS.This issue affects Photography: from n/a through <= 7.7.2.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00213 Published 2025-12-18 No fix listed CWE-79
Open these records in search →