Sunshine Photo Cart <= 3.1.1 - Reflected Cross-Site Scripting

WP Sunshine Sunshine Photo Cart versions up to 3.1.1 contain a cross-site scripting caused by improper neutralization of input during web page generation, letting attackers execute malicious scripts in users' browsers, exploit requires attacker to craft malicious input. id: CVE-2024-30194 info:...

Sunshine Photo Cart <= 3.2.5 - Reflected Cross-Site Scripting

WP Sunshine Sunshine Photo Cart versions up to 3.2.5 contain a reflected cross-site scripting caused by improper input neutralization during web page generation, letting attackers execute malicious scripts in users' browsers, exploit requires attacker to craft malicious input. id: CVE-2024-43971...

CVE-2026-111842

Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through 3.7.5...

EUVD-2026-108075

Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through 3.7.5...

CVE-2026-111842 WordPress Sunshine Photo Cart plugin <= 3.7.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through 3.7.5...

CVE-2026-111842

The Sunshine Photo Cart WordPress plugin, in versions up to and including 3.7.5 , contains a Missing Authorization vulnerability (CWE-862). This flaw allows for Exploiting Incorrectly Configured Access Control Security Levels . The impact of this broken access control is categorized as a MEDIUM s...

CVE-2026-111842 WordPress Sunshine Photo Cart plugin <= 3.7.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through 3.7.5...

WordPress Sunshine Photo Cart plugin <= 3.7.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by HarshG in WordPress Plugin Sunshine Photo Cart versions = 3.7.5...

WordPress Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin <= 3.7.4 - Unauthenticated PHP Object Injection vulnerability

Unauthenticated PHP Object Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin Sunshine Photo Cart versions = 3.7.4...

CVE-2026-104730

The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.7.4 via deserialization of untrusted input . This makes it possible for unauthenticated attackers to inject a PHP...

CVE-2026-104730 Sunshine Photo Cart <= 3.7.4 - Unauthenticated PHP Object Injection via 'key' Parameter

The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.7.4 via deserialization of untrusted input . This makes it possible for unauthenticated attackers to inject a PHP...

EUVD-2026-102796

The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.7.4 via deserialization of untrusted input . This makes it possible for unauthenticated attackers to inject a PHP...

CVE-2026-104730

The Sunshine Photo Cart WordPress plugin (versions up to and including 3.7.4 ) is vulnerable to PHP Object Injection due to the deserialization of untrusted input via the 'key' parameter . Unauthenticated attackers can inject a PHP Object, but the vulnerability has no impact unless a POP chain is...

CVE-2026-104730: Deserialization of Untrusted Data

The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.7.4 via deserialization of untrusted input . This makes it possible for unauthenticated attackers to inject a PHP...

PT-2026-115484

Name of the Vulnerable Software and Affected Versions Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers versions prior to 3.7.5 Description An issue exists where unauthenticated attackers can perform PHP Object Injection through the deserialization of untrusted input...

CVE-2026-109689

Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through 3.7.4...

CVE-2026-109689

The WordPress Sunshine Photo Cart plugin (versions ≤ 3.7.4 ) is affected by a Broken Access Control vulnerability (CWE-862). The issue arises from Incorrectly Configured Access Control Security Levels , specifically a missing authorization check within the sunshine-photo-cart component. This coul...

EUVD-2026-102245

Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through 3.7.4...

CVE-2026-109689 WordPress Sunshine Photo Cart plugin <= 3.7.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through 3.7.4...

WordPress Sunshine Photo Cart plugin <= 3.7.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rodrigo Cabo Igneva Solutions, S.L. in WordPress Plugin Sunshine Photo Cart versions = 3.7.4...