Read the docs

sunshinephotocart

Records27All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

sunshinephotocart records in CISA KEV

No sunshinephotocart vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Sunshine Photo Cart 16 records MEDIUM

Records

27 records

TI-2022-03939 CVE-2022-4301 · GHSA-cppm-xp38-fh2x

Sunshine Photo Cart < 2.9.15 - Reflected XSS

Priority MEDIUM 60

The Sunshine Photo Cart WordPress plugin before 2.9.15 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00912 Published 2023-01-09 Fixed in 2.9.15
TI-2026-75251 CVE-2026-104730 · GHSA-67cw-2778-7cwq

Unauthenticated PHP object injection in Sunshine Photo Cart plugin

Priority MEDIUM 49

The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.7.4 via deserialization of untrusted in…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00512 Published 2026-10-16 No fix listed CWE-502
TI-2024-29627 CVE-2024-44038 · GHSA-8467-9654-v2mx

WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerability

Priority MEDIUM 48

Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a th…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00409 Published 2024-11-01 No fix listed CWE-862
TI-2025-04923 CVE-2025-5482 · GHSA-3w3h-97p3-6xqh

Sunshine Photo Cart <= 3.4.11 - Authenticated (Subscriber+) Privilege Escalation

Priority MEDIUM 41

The Sunshine Photo Cart: Free Client Photo Galleries for Photographers plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.11.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0059 Published 2025-06-04 No fix listed CWE-620
TI-2024-31632 CVE-2024-47314 · GHSA-xh75-6m4g-h6hf

WordPress Sunshine Photo Cart plugin <= 3.2.8 - Broken Access Control vulnerability

Priority LOW 38

Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a th…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00393 Published 2024-11-01 No fix listed CWE-862
TI-2025-41582 CVE-2025-67973 · GHSA-jhr5-g8vv-6x3q

WordPress Sunshine Photo Cart plugin <= 3.5.6.2 - Broken Access Control vulnerability

Priority LOW 35

Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a th…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00273 Published 2026-02-20 No fix listed CWE-862
TI-2023-22196 CVE-2023-41796 · GHSA-2gcq-g27g-mx27

WordPress Sunshine Photo Cart Plugin < 3.0.0 is vulnerable to Insecure Direct Object References (IDOR)

Priority LOW 35

Authorization Bypass Through User-Controlled Key vulnerability in WP Sunshine Sunshine Photo Cart: Free Client Galleries for Photographers.This issue affects Sunshine Photo Cart: Free Client Galleries for Photographers:…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00424 Published 2023-12-20 Fixed in 3.0.0 CWE-639
TI-2026-67876 CVE-2026-93617 · GHSA-grvq-2w4w-4cx9

PHP object injection in WordPress Sunshine Photo Cart plugin

Priority LOW 33

Deserialization of Untrusted Data vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Object Injection.This issue affects Sunshine Photo Cart: from n/a through 3.7.1.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00291 Published 2026-10-05 No fix listed CWE-502
TI-2024-19940 CVE-2024-30194 · GHSA-4gwg-56fg-39pf

WordPress Sunshine Photo Cart plugin <= 3.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through <=…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00721 Published 2024-03-27 No fix listed CWE-79
TI-2026-79230 CVE-2026-111842 · GHSA-h64v-8pgf-7vp6

Missing authorization in WordPress Sunshine Photo Cart plugin

Priority LOW 30

Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00242 Published 2026-10-22 No fix listed CWE-862
TI-2026-28538 CVE-2026-39564 · GHSA-jjxw-758v-3qv3

WordPress Sunshine Photo Cart plugin < 3.6.2 - Sensitive Data Exposure vulnerability

Priority LOW 30

Insertion of Sensitive Information Into Sent Data vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Retrieve Embedded Sensitive Data.This issue affects Sunshine Photo Cart: from n/a throug…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0025 Published 2026-04-08 No fix listed CWE-201
TI-2025-39042 CVE-2025-62892 · GHSA-8q77-p5q9-gvx9

WordPress Sunshine Photo Cart plugin <= 3.5.3 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Sunshine Photo Cart: from n/a through <=…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00273 Published 2025-10-27 No fix listed CWE-862
TI-2026-74887 CVE-2026-109689

Missing authorization in WP Sunshine Sunshine Photo Cart plugin

Priority LOW 29

Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00221 Published 2026-10-15 No fix listed CWE-862
TI-2026-20179 CVE-2026-24994 · GHSA-f4vc-cxj3-j8vh

WordPress Sunshine Photo Cart plugin <= 3.5.7.2 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a th…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00222 Published 2026-02-03 No fix listed CWE-862
TI-2024-33895 CVE-2024-50463 · GHSA-q58q-j8gc-gvjh

WordPress Sunshine Photo Cart plugin <= 3.2.9 - Open Redirection vulnerability

Priority LOW 27

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through <= 3.2.9.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00273 Published 2024-10-28 No fix listed CWE-601
TI-2024-33183 CVE-2024-49697 · GHSA-v6rr-j96c-5w92

WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a th…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00415 Published 2024-11-19 No fix listed CWE-862
Load more
Open these records in search →