Skip to contentSunshinephotocart Sunshine Photo Cart vulnerabilities
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 3.7.5 - Broken Access Control vulnerabilityCVE-2026-1118425.3 Medium
- sunshinephotocart sunshine photo cart – client photo gallery & photo proofing for photographersSunshine Photo Cart <= 3.7.4 - Unauthenticated PHP Object Injection via 'key' ParameterCVE-2026-1047309.8 Critical
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 3.7.4 - Broken Access Control vulnerabilityCVE-2026-1096895.3 Medium
- sunshinephotocart sunshine photo cartSunshine Photo Cart < 3.7.4 - Unauthenticated Content Injection via sunshine_modal_add_comment()CVE-2026-1080695.3 Medium
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 3.7.1 - PHP Object Injection vulnerabilityCVE-2026-936177.2 High
- sunshinephotocart sunshine photo cartSunshine Photo Cart < 3.7 - Unauthenticated Price Manipulation via IDORCVE-2026-850375.3 Medium
- sunshinephotocart sunshine photo cartSunshine Photo Cart < 3.6.12 - Unauthenticated Private Gallery Comment DisclosureCVE-2026-165617.5 High
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 3.6.10.1 - Broken Access Control vulnerabilityCVE-2026-577036.3 Medium
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 3.6.7 - Broken Access Control vulnerabilityCVE-2026-427766.3 Medium
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin < 3.6.2 - Sensitive Data Exposure vulnerabilityCVE-2026-395645.3 Medium
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 3.5.6.2 - Broken Access Control vulnerabilityCVE-2025-679736.5 Medium
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 3.5.7.2 - Broken Access Control vulnerabilityCVE-2026-249945.3 Medium
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 3.5.7.1 - Broken Access Control vulnerabilityCVE-2025-685354.3 Medium
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 3.5.3 - Broken Access Control vulnerabilityCVE-2025-628925.3 Medium
- sunshinephotocart sunshine photo cart, sunshine photo cart – client photo gallery & photo proofing for photographers +1 moreSunshine Photo Cart <= 3.4.11 - Authenticated (Subscriber+) Privilege EscalationCVE-2025-54828.8 High
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 3.4.10 - PHP Object Injection VulnerabilityCVE-2025-310849.8 Critical
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 2.9.13 - Auth. Broken Access Control vulnerabilityCVE-2022-458265.4 Medium
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerabilityCVE-2024-496974.3 Medium
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 3.2.8 - Broken Access Control vulnerabilityCVE-2024-473147.1 High
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerabilityCVE-2024-440385.3 Medium
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 3.2.1 - Broken Access Control vulnerabilityCVE-2024-431364.3 Medium
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 3.2.9 - Open Redirection vulnerabilityCVE-2024-504634.7 Medium
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-439717.1 High
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 3.1.1 - PHP Object Injection vulnerabilityCVE-2024-302215.4 Medium
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart plugin <= 3.1.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-301947.1 High
- sunshinephotocart sunshine photo cart, sunshine photo cart – client photo gallery & photo proofing for photographers +1 moreSunshine Photo Cart: Free Client Galleries for Photographers <= 3.0.24 - Unauthenticated Sensitive Information Exposure via InvoiceCVE-2024-12945.3 Medium
- sunshinephotocart sunshine photo cart: free client galleries for photographers, sunshine photo cart +1 moreWordPress Sunshine Photo Cart Plugin < 3.0.0 is vulnerable to Insecure Direct Object References (IDOR)CVE-2023-417965.3 Medium
- sunshinephotocart sunshine photo cart, sunshine photo cart – client photo gallery & photo proofing for photographers +1 moreSunshine Photo Cart <= 2.8.28 - Cross-Site Request Forgery BypassCVE-2021-44154.3 Medium
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart Plugin <= 2.9.13 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2022-406925.4 Medium
- sunshinephotocart sunshine photo cartSunshine Photo Cart < 2.9.15 - Reflected XSSCVE-2022-43016.1 Medium