PT-2026-26294 · Unknown · Themegoods Photography

Phat Rio · Published 2026-03-19 · Updated 2026-03-23 · CVE-2026-27043

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ThemeGoods Photography versions through 7.7.5

Description The software contains a flaw related to unrestricted file uploads with dangerous file types, which can lead to path traversal. This allows for potential unauthorized access or manipulation of files on the system.

Recommendations Update ThemeGoods Photography to a version later than 7.7.5.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2026-27043

Affected Products

Themegoods Photography

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-27043 · Security Note
• https://patchstack.com/database/wordpress/theme/photography/vulnerability/wordpress-photography-theme-7-7-5-arbitrary-file-upload-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2036024203632419213 · Twitter Post
• https://patchstack.com/database/Wordpress/Theme/photography/vulnerability/wordpress-photography-theme-7-7-5-arbitrary-file-upload-vulnerability?_s_id=cve · Note