Skip to content
OpenAdvisories

Vendor

WP Sunshine

7 known vulnerabilities.

Products

Sunshine Photo Cart 6 Sunshine Photo Cart: Free Client Galleries for Photographers 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-111842

    WordPress Sunshine Photo Cart plugin <= 3.7.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through 3.7.5.

    WP Sunshine Sunshine Photo Cart
  • Medium 5.3
    CVE-2026-109689

    WordPress Sunshine Photo Cart plugin <= 3.7.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through 3.7.4.

    WP Sunshine Sunshine Photo Cart
  • Medium 6.3
    CVE-2026-42776

    WordPress Sunshine Photo Cart plugin <= 3.6.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Sunshine Photo Cart: from n/a through 3.6.7.

    WP Sunshine Sunshine Photo Cart
  • Medium 5.4
    CVE-2022-45826

    WordPress Sunshine Photo Cart plugin <= 2.9.13 - Auth. Broken Access Control vulnerability

    Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through 2.9.13.

    WP Sunshine Sunshine Photo Cart
  • Medium 5.3
    CVE-2023-41796

    WordPress Sunshine Photo Cart Plugin < 3.0.0 is vulnerable to Insecure Direct Object References (IDOR)

    Authorization Bypass Through User-Controlled Key vulnerability in WP Sunshine Sunshine Photo Cart: Free Client Galleries for Photographers.This issue affects Sunshine Photo Cart: Free Client Galleries for Photographers: from n/a before 3.0.0.

    WP Sunshine Sunshine Photo Cart: Free Client Galleries for Photographers
  • Medium 5.4
    CVE-2022-40692

    WordPress Sunshine Photo Cart Plugin <= 2.9.13 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in WP Sunshine Sunshine Photo Cart plugin <= 2.9.13 versions.

    WP Sunshine Sunshine Photo Cart