Themegoods Photome vulnerabilities

• themegoods photome WordPress PhotoMe theme <= 5.7.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-24949 7.1 HighFebruary 20, 2026
• themegoods photome WordPress PhotoMe theme <= 5.6.11 - PHP Object Injection vulnerability CVE-2025-69301 9.8 CriticalFebruary 20, 2026
• themegoods photome WordPress PhotoMe theme < 5.7.2 - Server Side Request Forgery (SSRF) vulnerability CVE-2026-24381 5.4 MediumJanuary 22, 2026