Sunshinephotocart vulnerabilities
Published CVEs affecting Sunshinephotocart products: 6 record(s), with severity, exploitation and fixes.
CVE-2026-57703
Medium · 6.3
CWE-862 Jul 23, 2026
WordPress Sunshine Photo Cart plugin <= 3.6.10.1 - Broken Access Control vulnerability
Subscriber Broken Access Control in Sunshine Photo Cart <= 3.6.10.1 versions.
CVE-2026-39564
Medium · 5.3
CWE-201 Apr 8, 2026
WordPress Sunshine Photo Cart plugin < 3.6.2 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Retrieve Embedded Sensitive Data.This issue affects Sunshine Photo Cart: from n/a through < 3.6.2.
CVE-2025-67973
Medium · 6.5
CWE-862 Feb 20, 2026
WordPress Sunshine Photo Cart plugin <= 3.5.6.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through <= 3.5.6.2.
CVE-2026-24994
Medium · 5.3
CWE-862 Feb 3, 2026
WordPress Sunshine Photo Cart plugin <= 3.5.7.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through <= 3.5.7.2.
CVE-2025-68535
Medium · 4.3
CWE-862 Dec 24, 2025
WordPress Sunshine Photo Cart plugin <= 3.5.7.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through <= 3.5.7.1.
CVE-2025-62892
Medium · 5.3
CWE-862 Oct 26, 2025
WordPress Sunshine Photo Cart plugin <= 3.5.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Sunshine Photo Cart: from n/a through <= 3.5.3.