How many ThemeGoods PhotoMe CVEs are in CISA KEV?

None of ThemeGoods PhotoMe's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of ThemeGoods PhotoMe are affected?

8 distinct ThemeGoods PhotoMe versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in ThemeGoods PhotoMe CVEs?

ThemeGoods PhotoMe's CVEs most often map to these CWE weakness types: CWE-502 (Deserialization of Untrusted Data), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-918 (Server-Side Request Forgery (SSRF)).

How many critical ThemeGoods PhotoMe vulnerabilities are there?

ThemeGoods PhotoMe has 1 critical and 1 high-severity CVEs.

What is the average severity of ThemeGoods PhotoMe CVEs?

The average CVSS base score across ThemeGoods PhotoMe's scored CVEs is 7.4.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

ThemeGoods

3 CVEs

ThemeGoods PhotoMe Vulnerabilities

Name: ThemeGoods PhotoMe vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for PhotoMe by ThemeGoods.

3

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.4

Avg CVSS

2026–2026

Last updated February 20, 2026

Overview

ThemeGoods PhotoMe has 3 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting ThemeGoods PhotoMe, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of ThemeGoods PhotoMe's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High1

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of ThemeGoods PhotoMe's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No ThemeGoods PhotoMe CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every ThemeGoods PhotoMe version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

>= 5.7.22 CVEs
<= 5.6.111 CVE
<= 5.7.11 CVE
<= 5.7.21 CVE

Fixed in

5.7.22 CVEs
> 5.6.111 CVE
> 5.7.11 CVE
> 5.7.21 CVE

Find a version

3 CVEs

Sort

WordPress PhotoMe theme <= 5.7.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-24949
Patch
CWE-79
High · CVSS 7.1
EPSS 0.2% (5th pct)2026-02-20
WordPress PhotoMe theme <= 5.6.11 - PHP Object Injection vulnerability
CVE-2025-69301
Patch
CWE-502
Critical · CVSS 9.8
EPSS 0.4% (30th pct)2026-02-20
WordPress PhotoMe theme < 5.7.2 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-24381
Patch
CWE-918
Medium · CVSS 5.4
EPSS 0.1% (4th pct)2026-01-22

Common weakness types

The CWE weakness categories most often found in ThemeGoods PhotoMe CVEs. Follow any weakness for its full explanation.

Other ThemeGoods products

Browse vulnerabilities for other products by ThemeGoods.

Photography9 CVEs Grand Restaurant7 CVEs grand conference4 CVEs Grand Photography3 CVEs Altair2 CVEs Grand Blog2 CVEs Grand Car Rental2 CVEs Grand Conference Theme Custom Post Type2 CVEs

All ThemeGoods vulnerabilities

Frequently asked questions

Common questions about ThemeGoods PhotoMe vulnerabilities.

How many CVEs does ThemeGoods PhotoMe have?: ThemeGoods PhotoMe has 3 published CVE records since 2026.
How many ThemeGoods PhotoMe CVEs are in CISA KEV?: None of ThemeGoods PhotoMe's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for ThemeGoods PhotoMe vulnerabilities?: No ThemeGoods PhotoMe CVEs currently have a tracked public exploit in this dataset.
Which versions of ThemeGoods PhotoMe are affected?: 8 distinct ThemeGoods PhotoMe versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in ThemeGoods PhotoMe CVEs?: ThemeGoods PhotoMe's CVEs most often map to these CWE weakness types: CWE-502 (Deserialization of Untrusted Data), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-918 (Server-Side Request Forgery (SSRF)).
How many critical ThemeGoods PhotoMe vulnerabilities are there?: ThemeGoods PhotoMe has 1 critical and 1 high-severity CVEs.
What is the average severity of ThemeGoods PhotoMe CVEs?: The average CVSS base score across ThemeGoods PhotoMe's scored CVEs is 7.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track ThemeGoods PhotoMe vulnerabilities

Monitor new ThemeGoods PhotoMe vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing