Local File Inclusion Vulnerability in ThemeGoods Photography by ThemeGoods
CVE-2025-68510

8.1HIGH

Key Information:

Vendor

WordPress
Status
Photography
Vendor
CVE Published:
22 January 2026

What is CVE-2025-68510?

The ThemeGoods Photography product is susceptible to a Local File Inclusion vulnerability due to improper control over include/require statements in PHP. This flaw allows potential attackers to exploit the theme, gaining unauthorized access to sensitive local files. It is imperative for users of Photography versions prior to 7.7.5 to implement protective measures and update to secure their applications from potential exploitation.

Affected Version(s)

Photography 0 <= 7.7.5

References

https://patchstack.com/database/Wordpress/Theme/photograp...
vdb-entry

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Rafie Muhammad (Patchstack)
.