Lucene search
+L

271 matches found

Patchstack
Patchstack
added 2026/01/29 6:44 a.m.16 views

WordPress SOHO - Photography WordPress Theme theme <= 3.0.3 - Cross Site Scripting (XSS) vulnerability

WordPress SOHO - Photography WordPress Theme theme = 3.0.3 - Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme SOHO - Photography WordPress Theme versions = 3.0.3...

7.1CVSS5.9AI score0.00239EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2026/01/28 11:54 a.m.19 views

WordPress Oyster - Photography WordPress Theme theme <= 4.4.3 - Cross Site Scripting (XSS) vulnerability

WordPress Oyster - Photography WordPress Theme theme = 4.4.3 - Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Oyster - Photography WordPress Theme versions = 4.4.3...

7.1CVSS5.9AI score0.00266EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/23 9:16 p.m.11 views

CVE-2025-68510

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeGoods Photography photography allows PHP Local File Inclusion.This issue affects Photography: from n/a through 7.7.5...

8.1CVSS5.5AI score0.00473EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/22 5:16 p.m.9 views

CVE-2025-68510

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeGoods Photography photography allows PHP Local File Inclusion.This issue affects Photography: from n/a through 7.7.5...

8.1CVSS0.00473EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/22 4:52 p.m.25 views

CVE-2025-68510

CVE-2025-68510 is a Local File Inclusion flaw in the ThemeGoods Photography (WordPress Photography) theme prior to version 7.7.5, caused by improper filename control in include/require statements for PHP. This vulnerability can lead to reading local files on the server (as described as PHP Local ...

8.1CVSS5.5AI score0.00473EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/22 4:52 p.m.34 views

CVE-2025-68510 WordPress Photography theme < 7.7.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeGoods Photography photography allows PHP Local File Inclusion.This issue affects Photography: from n/a through 7.7.5...

8.1CVSS0.00473EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 4:52 p.m.3 views

CVE-2025-68510 WordPress Photography theme < 7.7.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeGoods Photography photography allows PHP Local File Inclusion.This issue affects Photography: from n/a through 7.7.5...

5.9AI score0.00473EPSS
SaveExploits0References1
attackerkb
attackerkb
added 2026/01/22 4:52 p.m.8 views

CVE-2025-68510

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeGoods Photography photography allows PHP Local File Inclusion.This issue affects Photography: from n/a through 7.7.5...

8.1CVSS5.4AI score0.00473EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/01/22 12:00 a.m.15 views

PT-2026-4078

Name of the Vulnerable Software and Affected Versions ThemeGoods Photography versions prior to 7.7.5 Description The software contains a flaw due to improper control of filename for include/require statements, specifically a PHP Remote File Inclusion issue. This allows for PHP Local File Inclusio...

5.3AI score0.00473EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/01/22 12:00 a.m.19 views

WordPress plugin “Photography” security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There wa...

8.1CVSS5.8AI score0.00473EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/01/05 10:30 a.m.14 views

WordPress Photography theme < 7.7.5 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme Photography versions 7.7.5...

8.1CVSS7AI score0.00473EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/19 7:32 a.m.11 views

CVE-2025-64217

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGoods Photography photography allows Reflected XSS.This issue affects Photography: from n/a through = 7.7.2...

7.1CVSS6.4AI score0.00213EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/18 9:30 a.m.10 views

EUVD-2025-204079

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGoods Photography photography allows Reflected XSS.This issue affects Photography: from n/a through = 7.7.2...

7.1CVSS5.9AI score0.00213EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/18 8:16 a.m.11 views

CVE-2025-64217

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGoods Photography photography allows Reflected XSS.This issue affects Photography: from n/a through = 7.7.2...

7.1CVSS5.8AI score0.00213EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/18 8:16 a.m.12 views

CVE-2025-64217

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGoods Photography photography allows Reflected XSS.This issue affects Photography: from n/a through = 7.7.2...

7.1CVSS0.00213EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/18 7:22 a.m.32 views

CVE-2025-64217 WordPress Photography theme <= 7.7.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGoods Photography photography allows Reflected XSS.This issue affects Photography: from n/a through = 7.7.2...

7.1CVSS0.00213EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/18 7:22 a.m.24 views

CVE-2025-64217

CVE-2025-64217 concerns the WordPress Photography theme (version range:

7.1CVSS6AI score0.00213EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/18 7:22 a.m.4 views

CVE-2025-64217 WordPress Photography theme <= 7.7.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGoods Photography photography allows Reflected XSS.This issue affects Photography: from n/a through = 7.7.2...

7.1CVSS6AI score0.00213EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/18 12:00 a.m.10 views

WordPress plugin Photography 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

7.1CVSS5.9AI score0.00213EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/18 12:00 a.m.16 views

PT-2025-52166

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGoods Photography photography allows Reflected XSS.This issue affects Photography: from n/a through = 7.7.2...

6.4AI score0.00213EPSS
SaveExploits0References2
Rows per page
Query Builder