PhotoMe vulnerabilities | LiveThreat CVE Feed

Product

PhotoMe

by ThemeGoods · last CVE Feb 20, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 1High 1Medium 1Low 0

Severity

Exploitation

Watch

Add PhotoMe to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-69301	9.8	0%	Feb 20	WordPress PhotoMe theme <= 5.6.11 - PHP Object Injection vulnerability Affected: through 5.6.11
CVE-2026-24949	7.1	0%	Feb 20	WordPress PhotoMe theme <= 5.7.1 - Cross Site Scripting (XSS) vulnerability Affected: through 5.7.1
CVE-2026-24381	5.4	0%	Jan 22	WordPress PhotoMe theme < 5.7.2 - Server Side Request Forgery (SSRF) vulnerability Affected: through 5.7.2