PT-2026-26294 · Unknown · Themegoods Photography

Phat Rio · Publicado 2026-03-19 · Atualizado 2026-03-23 · CVE-2026-27043

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ThemeGoods Photography versions through 7.7.5

Description The software contains a flaw related to unrestricted file uploads with dangerous file types, which can lead to path traversal. This allows for potential unauthorized access or manipulation of files on the system.

Recommendations Update ThemeGoods Photography to a version later than 7.7.5.

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2026-27043

Produtos afetados

Themegoods Photography

Referências · 4

• https://patchstack.com/database/wordpress/theme/photography/vulnerability/wordpress-photography-theme-7-7-5-arbitrary-file-upload-vulnerability?_s_id=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-27043 · Nota de Segurança
• https://twitter.com/CVEnew/status/2036024203632419213 · Publicação no Twitter
• https://patchstack.com/database/Wordpress/Theme/photography/vulnerability/wordpress-photography-theme-7-7-5-arbitrary-file-upload-vulnerability?_s_id=cve · Nota