photocart-link

photocart-link has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of September 2026. Their average CVSS score is 8.1, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is PHP Remote File Inclusion, behind 1 of the records (100%).

The one issue recorded for photocart-link has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by CrashBandicot @DosPerl.

01234567891015.06.2026Today15.06.20268.1Photocart Link <= 1.6 - Unauthenticated Local File Inclusion CVSS 8.1 · 15.06.2026

Strategic Overview

Avg CVSSHigh
8.1/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all photocart-link vulnerabilities before they are exploited.

Most severe open issueCVSS 8.1CVE-2016-20077

Photocart Link <= 1.6 - Unauthenticated Local File Inclusion

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C