Skip to content
OpenAdvisories

Vendor

sunshinephotocart

19 known vulnerabilities.

Products

Sunshine Photo Cart 15 Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers 4
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2025-5482

    Sunshine Photo Cart <= 3.4.11 - Authenticated (Subscriber+) Privilege Escalation

    The Sunshine Photo Cart: Free Client Photo Galleries for Photographers plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.11. This is due to the plugin not properly validating a user-suppl…

    sunshinephotocart Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers Web / CMS
  • High 7.1
    CVE-2024-47314

    WordPress Sunshine Photo Cart plugin <= 3.2.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through <= 3.2.8.

    sunshinephotocart Sunshine Photo Cart
  • High 7.1
    CVE-2024-43971 Scanner template

    WordPress Sunshine Photo Cart plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through <= 3.2.5.

    sunshinephotocart Sunshine Photo Cart
  • High 7.1
    CVE-2024-30194 Scanner template

    WordPress Sunshine Photo Cart plugin <= 3.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through <= 3.1.1.

    sunshinephotocart Sunshine Photo Cart