PatchTheCVE: photographyhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-64217: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoohttps://patchthecve.com/cve/CVE-2025-64217.htmlhttps://patchthecve.com/cve/CVE-2025-64217.htmlWed, 17 Jun 2026 09:54:02 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Photography photography allows Reflected XSS.This issue affects Photography: from n/a through <= 7.7.2.CVE-2025-47579: Deserialization of Untrusted Data vulnerability in ThemeGoods Photography photography allows Object Injection.https://patchthecve.com/cve/CVE-2025-47579.htmlhttps://patchthecve.com/cve/CVE-2025-47579.htmlWed, 17 Jun 2026 09:28:20 +0000CRITICAL 9.0: Deserialization of Untrusted Data vulnerability in ThemeGoods Photography photography allows Object Injection.This issue affects Photography: from n/a through <= 7.7.2.CVE-2025-47584: Deserialization of Untrusted Data vulnerability in ThemeGoods Photography.This issue affects Photography: fromhttps://patchthecve.com/cve/CVE-2025-47584.htmlhttps://patchthecve.com/cve/CVE-2025-47584.htmlWed, 17 Jun 2026 09:28:21 +0000HIGH 8.5: Deserialization of Untrusted Data vulnerability in ThemeGoods Photography.This issue affects Photography: from n/a through 7.5.2.