Skip to content

Sunshinephotocart vulnerabilities

Products

Newest

sunshinephotocart sunshine photo cart WordPress Sunshine Photo Cart plugin <= 3.7.5 - Broken Access Control vulnerability CVE-2026-111842 5.3 MediumOctober 22, 2026
sunshinephotocart sunshine photo cart – client photo gallery & photo proofing for photographers Sunshine Photo Cart <= 3.7.4 - Unauthenticated PHP Object Injection via 'key' Parameter CVE-2026-104730 9.8 CriticalOctober 16, 2026
sunshinephotocart sunshine photo cart WordPress Sunshine Photo Cart plugin <= 3.7.4 - Broken Access Control vulnerability CVE-2026-109689 5.3 MediumOctober 15, 2026
sunshinephotocart sunshine photo cart Sunshine Photo Cart < 3.7.4 - Unauthenticated Content Injection via sunshine_modal_add_comment() CVE-2026-108069 5.3 MediumOctober 14, 2026
sunshinephotocart sunshine photo cart WordPress Sunshine Photo Cart plugin <= 3.7.1 - PHP Object Injection vulnerability CVE-2026-93617 7.2 HighOctober 5, 2026
sunshinephotocart sunshine photo cart Sunshine Photo Cart < 3.7 - Unauthenticated Price Manipulation via IDOR CVE-2026-85037 5.3 MediumSeptember 9, 2026
sunshinephotocart sunshine photo cart Sunshine Photo Cart < 3.6.12 - Unauthenticated Private Gallery Comment Disclosure CVE-2026-16561 7.5 HighAugust 5, 2026
sunshinephotocart sunshine photo cart WordPress Sunshine Photo Cart plugin <= 3.6.10.1 - Broken Access Control vulnerability CVE-2026-57703 6.3 MediumJuly 23, 2026
sunshinephotocart sunshine photo cart WordPress Sunshine Photo Cart plugin <= 3.6.7 - Broken Access Control vulnerability CVE-2026-42776 6.3 MediumMay 25, 2026
sunshinephotocart sunshine photo cart WordPress Sunshine Photo Cart plugin < 3.6.2 - Sensitive Data Exposure vulnerability CVE-2026-39564 5.3 MediumApril 8, 2026
sunshinephotocart sunshine photo cart WordPress Sunshine Photo Cart plugin <= 3.5.6.2 - Broken Access Control vulnerability CVE-2025-67973 6.5 MediumFebruary 20, 2026
sunshinephotocart sunshine photo cart WordPress Sunshine Photo Cart plugin <= 3.5.7.2 - Broken Access Control vulnerability CVE-2026-24994 5.3 MediumFebruary 3, 2026
sunshinephotocart sunshine photo cart WordPress Sunshine Photo Cart plugin <= 3.5.7.1 - Broken Access Control vulnerability CVE-2025-68535 4.3 MediumDecember 24, 2025
sunshinephotocart sunshine photo cart WordPress Sunshine Photo Cart plugin <= 3.5.3 - Broken Access Control vulnerability CVE-2025-62892 5.3 MediumOctober 27, 2025
sunshinephotocart sunshine photo cart, sunshine photo cart – client photo gallery & photo proofing for photographers +1 more Sunshine Photo Cart <= 3.4.11 - Authenticated (Subscriber+) Privilege Escalation CVE-2025-5482 8.8 HighJune 4, 2025
sunshinephotocart sunshine photo cart WordPress Sunshine Photo Cart plugin <= 3.4.10 - PHP Object Injection Vulnerability CVE-2025-31084 9.8 CriticalApril 1, 2025
sunshinephotocart sunshine photo cart WordPress Sunshine Photo Cart plugin <= 2.9.13 - Auth. Broken Access Control vulnerability CVE-2022-45826 5.4 MediumDecember 13, 2024
sunshinephotocart sunshine photo cart WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerability CVE-2024-49697 4.3 MediumNovember 19, 2024
sunshinephotocart sunshine photo cart WordPress Sunshine Photo Cart plugin <= 3.2.8 - Broken Access Control vulnerability CVE-2024-47314 7.1 HighNovember 1, 2024
sunshinephotocart sunshine photo cart WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerability CVE-2024-44038 5.3 MediumNovember 1, 2024
sunshinephotocart sunshine photo cart WordPress Sunshine Photo Cart plugin <= 3.2.1 - Broken Access Control vulnerability CVE-2024-43136 4.3 MediumNovember 1, 2024
sunshinephotocart sunshine photo cart WordPress Sunshine Photo Cart plugin <= 3.2.9 - Open Redirection vulnerability CVE-2024-50463 4.7 MediumOctober 28, 2024
sunshinephotocart sunshine photo cart WordPress Sunshine Photo Cart plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability CVE-2024-43971 7.1 HighSeptember 17, 2024
sunshinephotocart sunshine photo cart WordPress Sunshine Photo Cart plugin <= 3.1.1 - PHP Object Injection vulnerability CVE-2024-30221 5.4 MediumMarch 28, 2024
sunshinephotocart sunshine photo cart WordPress Sunshine Photo Cart plugin <= 3.1.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-30194 7.1 HighMarch 27, 2024
sunshinephotocart sunshine photo cart, sunshine photo cart – client photo gallery & photo proofing for photographers +1 more Sunshine Photo Cart: Free Client Galleries for Photographers <= 3.0.24 - Unauthenticated Sensitive Information Exposure via Invoice CVE-2024-1294 5.3 MediumFebruary 20, 2024
sunshinephotocart sunshine photo cart: free client galleries for photographers, sunshine photo cart +1 more WordPress Sunshine Photo Cart Plugin < 3.0.0 is vulnerable to Insecure Direct Object References (IDOR) CVE-2023-41796 5.3 MediumDecember 20, 2023
sunshinephotocart sunshine photo cart, sunshine photo cart – client photo gallery & photo proofing for photographers +1 more Sunshine Photo Cart <= 2.8.28 - Cross-Site Request Forgery Bypass CVE-2021-4415 4.3 MediumJuly 12, 2023
sunshinephotocart sunshine photo cart WordPress Sunshine Photo Cart Plugin <= 2.9.13 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2022-40692 5.4 MediumFebruary 2, 2023
sunshinephotocart sunshine photo cart Sunshine Photo Cart < 2.9.15 - Reflected XSS CVE-2022-4301 6.1 MediumJanuary 9, 2023