Portrait-Archiv Photostore – Sell Photos & Client Galleries
Portrait-Archiv Photostore – Sell Photos & Client Galleries has one disclosed vulnerability in the WordSec catalog, all reported in 2019; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Portrait-Archiv Photostore – Sell Photos & Client Galleries has a vendor fix available, so running the current release closes it.
All of these findings were reported by Ricardo Sanchez. Portrait-Archiv Photostore – Sell Photos & Client Galleries is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
Portrait-Archiv.com Photostore < 3.2 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records

Portrait-Archiv Photostore – Sell Photos & Client Galleries
Author
Thomas Schiffler
Sell your photos from WordPress — without running an online shop. Publish your galleries, and Portrait-Service takes care of everything else: secure payment, professional production and direct shipping to your customer. Every month you receive your commission — with a detailed statement. No shop setup, no logistics, no accounting on your side. Running a real online shop is a huge effort for a photographer: payment providers, invoicing, VAT, print production, packaging, shipping, returns. This plugin (and the Portrait-Archiv.com service behind it) takes all of that off your plate — so selling your photos becomes realistic even for a small studio or a hobby photographer, without complexity. What makes it different Built for school & kindergarten photography (QR codes). Shoot whole classes with per-child QR codes: on upload every child’s photos are sorted into their own protected folder. Parents enter the personal code from their child’s card and see only their own child plus the group photos — never another family’s children. Enforced on the server for real privacy (GDPR), with a 7-day, encrypted share link for grandparents. This is a genuine unique selling point for your studio. Publish as many galleries as you like — portraits, weddings, events, and specialised jobs like school and kindergarten photography. Not just downloads. Your customers order real photo prints, wall art, canvas, gifts and digital downloads — you decide which products and at what price. Full fulfilment through us. Order intake, payment processing, production and direct shipping to the end customer all happen through Portrait-Service. You never touch an order. Monthly commission payout with a clear statement — you keep the margin between the lab price and your own sale price. Access-protected galleries for sensitive jobs: public list, guest password or gallery code (ideal for schools and kindergartens). Volume discounts (tiered prices) to encourage larger orders — shown to your customers automatically. Edit only what actually sells. Upload your photos straight out of the camera and mark them as unedited. Customers see and order them as they are; you retouch just the ordered ones and upload the finished file, and only then does production start. A whole shoot no longer has to be retouched on spec. What the plugin does in WordPress Connect your Portrait-Archiv account in one step, or create a new free account right from WordPress — no tokens to copy. Manage galleries: create them, upload images, set visibility and edit title, date and price list. Uploads go into the gallery folder of your choice — pick an existing subfolder or name a new one — and you decide per upload whether the photos are finished or still to be edited. Manage price lists: your purchase price, your sale price and your net profit at a glance; add or remove products; set tiered prices. Embed a gallery with a Gutenberg block (just pick it from a dropdown) or a shortcode. Give the cart its own page – one block, and every cart link leads there. See how often each gallery was opened: a “Views” column in the gallery list and a day-by-day chart per gallery, with the visitors from your own website and those from Portrait-Archiv.com side by side. Make the galleries look like your website — without writing CSS: accent color for buttons, links and prices, preview images cropped to squares or shown as whole photos, their size, rounded or square corners, and what shows behind them. With a live preview right next to the settings. A modern, fast, mobile-friendly shop for your visitors; payment by prepayment or PayPal. Your public list of galleries is split into pages, so even a large archive opens quickly. More about the Portrait-Archiv photo reordering system: https://www.portrait-service.com/portrait-archiv
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C