PatchTheCVEphotography vulnerabilities and fixes
Recent CVEs affecting photography, with upgrade or downgrade steps. 3 tracked.
photography has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2025-12-18. Highest priority: CVE-2025-47579 (score 43/100).
- CVE-2025-64217 HIGH 7.1 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoo
- CVE-2025-47584 HIGH 8.5 UPGRADE Deserialization of Untrusted Data vulnerability in ThemeGoods Photography.This issue affects Photography: from
- CVE-2025-47579 CRITICAL 9.0 UPGRADE Deserialization of Untrusted Data vulnerability in ThemeGoods Photography photography allows Object Injection.
FAQ
How do I fix photography vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is photography being exploited right now?
None of the tracked photography CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which photography CVE should I patch first?
CVE-2025-47579 currently ranks highest (43/100): Deserialization of Untrusted Data vulnerability in ThemeGoods Photography photography allows Object Injection..