WordPress Grand Photography theme <= 5.7.8 - PHP Object Injection vulnerability

Description

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Photography grandphotography allows Object Injection.This issue affects Grand Photography: from n/a through <= 5.7.8.

Affected Products

Vendor	Product	Versions
themegoods	grand photography	0

References

https://patchstack.com/database/Wordpress/Theme/grandphotography/vulnerability/wordpress-grand-photography-theme-5-7-8-php-object-injection-vulnerability?_s_id=cve(vdb-entry)

Related News (1 articles)

Tier C

VulDB20h ago

CVE-2026-57770 | meGoods Grand Photography Plugin up to 5.7.8 on WordPress deserialization

→ No new info (linked only)

CVSS 3.19.8 CRITICAL

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA KEV❌ No

Actively exploited✅ Yes

CWECWE-502

PublishedJul 13, 2026

Last enriched19h agov2

Trending Score58

Source articles1

Independent1

Info Completeness8/14

Missing: epss, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

Version History

Last enriched 19h ago

v2Tier C19h ago

Updated vendor to meGoods, marked exploit availability as false, and noted that the vulnerability is actively exploited.

activelyExploited

via VulDB

v121h ago

Initial creation

WordPress Grand Photography theme <= 5.7.8 - PHP Object Injection vulnerability

Description

Affected Products

References

Related News (1 articles)

Community Vote

Related CVEs (3)

Pin to Dashboard

Verification

Vulnerability Timeline

Version History