Vulnerabilities

TI-2026-79230 CVE-2026-111842 · GHSA-h64v-8pgf-7vp6

Missing authorization in WordPress Sunshine Photo Cart plugin

LOW 30

Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00242 Published 2026-10-22 No fix listed CWE-862

TI-2026-75251 CVE-2026-104730 · GHSA-67cw-2778-7cwq

Unauthenticated PHP object injection in Sunshine Photo Cart plugin

MEDIUM 49

The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.7.4 via deserialization of untrusted in…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00512 Published 2026-10-16 No fix listed CWE-502

TI-2026-74887 CVE-2026-109689

Missing authorization in WP Sunshine Sunshine Photo Cart plugin

LOW 29

Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00221 Published 2026-10-15 No fix listed CWE-862

TI-2026-67876 CVE-2026-93617 · GHSA-grvq-2w4w-4cx9

PHP object injection in WordPress Sunshine Photo Cart plugin

LOW 33

Deserialization of Untrusted Data vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Object Injection.This issue affects Sunshine Photo Cart: from n/a through 3.7.1.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00291 Published 2026-10-05 No fix listed CWE-502

TI-2026-41527 CVE-2026-57703 · GHSA-q6xv-m39h-j295

WordPress Sunshine Photo Cart plugin <= 3.6.10.1 - Broken Access Control vulnerability

LOW 28

Subscriber Broken Access Control in Sunshine Photo Cart <= 3.6.10.1 versions.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.0026 Published 2026-07-23 No fix listed CWE-862

TI-2026-30999 CVE-2026-42776 · GHSA-42vq-h95x-4x26

WordPress Sunshine Photo Cart plugin <= 3.6.7 - Broken Access Control vulnerability

LOW 27

Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00202 Published 2026-05-25 No fix listed CWE-862

TI-2026-28538 CVE-2026-39564 · GHSA-jjxw-758v-3qv3

WordPress Sunshine Photo Cart plugin < 3.6.2 - Sensitive Data Exposure vulnerability

LOW 30

Insertion of Sensitive Information Into Sent Data vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Retrieve Embedded Sensitive Data.This issue affects Sunshine Photo Cart: from n/a throug…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0025 Published 2026-04-08 No fix listed CWE-201

TI-2025-41582 CVE-2025-67973 · GHSA-jhr5-g8vv-6x3q

WordPress Sunshine Photo Cart plugin <= 3.5.6.2 - Broken Access Control vulnerability

LOW 35

Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a th…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00273 Published 2026-02-20 No fix listed CWE-862

TI-2026-20179 CVE-2026-24994 · GHSA-f4vc-cxj3-j8vh

WordPress Sunshine Photo Cart plugin <= 3.5.7.2 - Broken Access Control vulnerability

LOW 29

Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a th…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00222 Published 2026-02-03 No fix listed CWE-862

TI-2025-42056 CVE-2025-68535 · GHSA-m2qp-fr5w-c44v

WordPress Sunshine Photo Cart plugin <= 3.5.7.1 - Broken Access Control vulnerability

LOW 19

Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a th…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00189 Published 2025-12-24 No fix listed CWE-862

TI-2025-39042 CVE-2025-62892 · GHSA-8q77-p5q9-gvx9

WordPress Sunshine Photo Cart plugin <= 3.5.3 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Sunshine Photo Cart: from n/a through <=…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00273 Published 2025-10-27 No fix listed CWE-862

TI-2025-04923 CVE-2025-5482 · GHSA-3w3h-97p3-6xqh

Sunshine Photo Cart <= 3.4.11 - Authenticated (Subscriber+) Privilege Escalation

MEDIUM 41

The Sunshine Photo Cart: Free Client Photo Galleries for Photographers plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.11.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0059 Published 2025-06-04 No fix listed CWE-620

TI-2025-22354 CVE-2025-31084 · GHSA-3vmq-cr85-65gq

WordPress Sunshine Photo Cart plugin <= 3.4.10 - PHP Object Injection Vulnerability

MEDIUM 50

Deserialization of Untrusted Data vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Object Injection.This issue affects Sunshine Photo Cart: from n/a through <= 3.4.10.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00731 Published 2025-04-01 No fix listed CWE-502

TI-2022-22630 CVE-2022-45826 · GHSA-pm7j-cf5m-mq99

WordPress Sunshine Photo Cart plugin <= 2.9.13 - Auth. Broken Access Control vulnerability

LOW 25

Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through 2.9.13.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.0043 Published 2024-12-13 No fix listed CWE-862

TI-2024-33183 CVE-2024-49697 · GHSA-v6rr-j96c-5w92

WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a th…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00415 Published 2024-11-19 No fix listed CWE-862

TI-2024-31632 CVE-2024-47314 · GHSA-xh75-6m4g-h6hf

WordPress Sunshine Photo Cart plugin <= 3.2.8 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a th…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00393 Published 2024-11-01 No fix listed CWE-862

TI-2024-29627 CVE-2024-44038 · GHSA-8467-9654-v2mx

WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerability

MEDIUM 48

Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a th…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00409 Published 2024-11-01 No fix listed CWE-862

TI-2024-28807 CVE-2024-43136 · GHSA-jf2g-fqpf-2mrq

WordPress Sunshine Photo Cart plugin <= 3.2.1 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through <= 3.2.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00439 Published 2024-11-01 No fix listed CWE-862

TI-2024-33895 CVE-2024-50463 · GHSA-q58q-j8gc-gvjh

WordPress Sunshine Photo Cart plugin <= 3.2.9 - Open Redirection vulnerability

LOW 27

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through <= 3.2.9.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00273 Published 2024-10-28 No fix listed CWE-601

TI-2024-29560 CVE-2024-43971 · GHSA-vj4c-r6hh-429f

WordPress Sunshine Photo Cart plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability

LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through <=…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00624 Published 2024-09-17 No fix listed CWE-79

TI-2024-19967 CVE-2024-30221 · GHSA-pr9j-p6wx-p73x

WordPress Sunshine Photo Cart plugin <= 3.1.1 - PHP Object Injection vulnerability

MEDIUM 42

Deserialization of Untrusted Data vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through <= 3.1.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00465 Published 2024-03-28 No fix listed CWE-502

TI-2024-19940 CVE-2024-30194 · GHSA-4gwg-56fg-39pf

WordPress Sunshine Photo Cart plugin <= 3.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through <=…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00721 Published 2024-03-27 No fix listed CWE-79

TI-2024-01204 CVE-2024-1294 · GHSA-2jp9-jf92-mxp7

Improper access control in sunshinephotocart Sunshine Photo Cart – Client Photo Gallery &…

LOW 31

The Sunshine Photo Cart: Free Client Galleries for Photographers plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.24 via the 'invoice'.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00678 Published 2024-02-20 No fix listed CWE-284

TI-2023-22196 CVE-2023-41796 · GHSA-2gcq-g27g-mx27

WordPress Sunshine Photo Cart Plugin < 3.0.0 is vulnerable to Insecure Direct Object References (IDOR)

LOW 35

Authorization Bypass Through User-Controlled Key vulnerability in WP Sunshine Sunshine Photo Cart: Free Client Galleries for Photographers.This issue affects Sunshine Photo Cart: Free Client Galleries for Photographers:…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00424 Published 2023-12-20 Fixed in 3.0.0 CWE-639

TI-2021-03272 CVE-2021-4415 · GHSA-jmrg-64rf-qpwj

Sunshine Photo Cart <= 2.8.28 - Cross-Site Request Forgery Bypass

LOW 20

The Sunshine Photo Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.8.28 This is due to missing or incorrect nonce validation on the sunshine_products_quicksave_po…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00384 Published 2023-07-12 No fix listed CWE-352

Vulnerabilities

Filters