Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-39564 EUVD-2026-20209

WordPress Sunshine Photo Cart plugin < 3.6.2 - Sensitive Data Exposure vulnerability

Published Apr 8, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Description

Insertion of Sensitive Information Into Sent Data vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Retrieve Embedded Sensitive Data.This issue affects Sunshine Photo Cart: from n/a through < 3.6.2.

Affected products

VendorProductAffectedFixed
sunshinephotocart Sunshine Photo Cart ≤ 3.6.2 —

References