Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: ThemeGoods Component: Photography Clear all filters
TI-2025-39660 CVE-2025-64217 · GHSA-r65w-qfqm-5mfj

WordPress Photography theme <= 7.7.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Photography photography allows Reflected XSS.This issue affects Photography: from n/a through <= 7.7.2.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00213 Published 2025-12-18 No fix listed CWE-79
TI-2025-30076 CVE-2025-47579 · GHSA-qf54-mr3w-jmww

WordPress Photography Theme <= 7.7.2 - PHP Object Injection Vulnerability

Priority MEDIUM 41

Deserialization of Untrusted Data vulnerability in ThemeGoods Photography photography allows Object Injection.This issue affects Photography: from n/a through <= 7.7.2.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00325 Published 2025-09-09 No fix listed CWE-502