What’s Vulnerable › Products

sunshinephotocart Sunshine Photo Cart vulnerabilities

30 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 17 published in the last 12 months.

Check whether your sunshinephotocart Sunshine Photo Cart version is affected

Latest sunshinephotocart Sunshine Photo Cart vulnerabilities

• CVE-2026-111842 — WordPress Sunshine Photo Cart plugin <= 3.7.5 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2026-104730 — Sunshine Photo Cart <= 3.7.4 - Unauthenticated PHP Object Injection via 'key' Parameter (CVSS 9.8)
• CVE-2026-109689 — WordPress Sunshine Photo Cart plugin <= 3.7.4 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2026-108069 — Sunshine Photo Cart < 3.7.4 - Unauthenticated Content Injection via sunshine_modal_add_comment() (CVSS 5.3)
• CVE-2026-93617 — WordPress Sunshine Photo Cart plugin <= 3.7.1 - PHP Object Injection vulnerability (CVSS 7.2)
• CVE-2026-85037 — Sunshine Photo Cart < 3.7 - Unauthenticated Price Manipulation via IDOR (CVSS 5.3)
• CVE-2026-16561 — Sunshine Photo Cart < 3.6.12 - Unauthenticated Private Gallery Comment Disclosure (CVSS 7.5)
• CVE-2026-57703 — WordPress Sunshine Photo Cart plugin <= 3.6.10.1 - Broken Access Control vulnerability (CVSS 6.3)
• CVE-2026-42776 — WordPress Sunshine Photo Cart plugin <= 3.6.7 - Broken Access Control vulnerability (CVSS 6.3)
• CVE-2026-39564 — WordPress Sunshine Photo Cart plugin < 3.6.2 - Sensitive Data Exposure vulnerability (CVSS 5.3)
• CVE-2025-67973 — WordPress Sunshine Photo Cart plugin <= 3.5.6.2 - Broken Access Control vulnerability (CVSS 6.5)
• CVE-2026-24994 — WordPress Sunshine Photo Cart plugin <= 3.5.7.2 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2025-68535 — WordPress Sunshine Photo Cart plugin <= 3.5.7.1 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2025-62892 — WordPress Sunshine Photo Cart plugin <= 3.5.3 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2025-5482 — Sunshine Photo Cart <= 3.4.11 - Authenticated (Subscriber+) Privilege Escalation (CVSS 8.8)
• CVE-2025-31084 — WordPress Sunshine Photo Cart plugin <= 3.4.10 - PHP Object Injection Vulnerability (CVSS 9.8)
• CVE-2022-45826 — WordPress Sunshine Photo Cart plugin <= 2.9.13 - Auth. Broken Access Control vulnerability (CVSS 5.4)
• CVE-2024-49697 — WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2024-47314 — WordPress Sunshine Photo Cart plugin <= 3.2.8 - Broken Access Control vulnerability (CVSS 8.8)
• CVE-2024-44038 — WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerability (CVSS 9.8)
• CVE-2024-43136 — WordPress Sunshine Photo Cart plugin <= 3.2.1 - Broken Access Control vulnerability (CVSS 8.8)
• CVE-2024-50463 — WordPress Sunshine Photo Cart plugin <= 3.2.9 - Open Redirection vulnerability (CVSS 6.1)
• CVE-2024-43971 — WordPress Sunshine Photo Cart plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
• CVE-2024-30221 — WordPress Sunshine Photo Cart plugin <= 3.1.1 - PHP Object Injection vulnerability (CVSS 9.8)
• CVE-2024-30194 — WordPress Sunshine Photo Cart plugin <= 3.1.1 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)