CVE-2026-27043

WordPress Photography theme < 7.7.6 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in ThemeGoods Photography allows Path Traversal.This issue affects Photography: from n/a before 7.7.6.

We have discovered 86 live websites that are affected by CVE-2026-27043.

Run a Free Instant Scan



Affected Software

Product  Photography
Category Wordpress Themes
Vulnerable Domains86 live websites (100% of Photography install base)
Vulnerable Versions
  • from 0 through 7.7.6
Vulnerable Versions Count10 versions ( 100% of all versions)


Common Weakness Enumeration

CWE-434 Unrestricted Upload of File with Dangerous Type



Details

  • Published - Mar 19, 2026
  • Updated - Apr 28, 2026

Credits

  • Phat RiO - BlueRock | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2026-27043
United States27 websites


France12 websites
Germany8 websites
Switzerland5 websites
GB5 websites
Australia4 websites
Canada4 websites
Austria2 websites
Belgium2 websites
Denmark2 websites

Website Distribution by TLD

Number of websites using CVE-2026-27043
.com38 websites
.de7 websites
.fr6 websites
.ch5 websites
.it3 websites
.at2 websites
.be2 websites
.co.uk2 websites
.com.au2 websites
.org2 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-27043

Top websites that are affected by CVE-2026-27043. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
**********.com United States*,***,***
*************.org United States*,***,***
****************.com Germany*,***,***
***********************.fr France*,***,***
*******************.com United States*,***,***
*************.com France*,***,***
****.*****************.com United States*,***,***
***************.it Italy*,***,***
*********************.de Germany*,***,***
**********.it GB*,***,***
See full domain list

FAQ

CVE-2026-27043 is Unrestricted Upload of File with Dangerous Type in Photography
A total of 86 websites have been identified as vulnerable to CVE-2026-27043, based on global website indexing conducted by WebTechSurvey.
The Photography is affected by the CVE-2026-27043 vulnerability.
Photography versions up to 7.7.6 are vulnerable to CVE-2026-27043.
CVE-2026-27043 is resolved in version 7.7.6 of Photography.