WP Sunshine
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Sunshine Photo Cart | 6 | – | Oct 22, 2026 |
| Sunshine Photo Cart: Free Client Galleries for Photographers | 1 | – | Dec 20, 2023 |
Exploited and recent CVEs
- CVE-2026-111842 WordPress Sunshine Photo Cart plugin <= 3.7.5 - Broken Access Control vulnerability 0.2%
- CVE-2026-109689 WordPress Sunshine Photo Cart plugin <= 3.7.4 - Broken Access Control vulnerability 0.2%
- CVE-2026-93617 WordPress Sunshine Photo Cart plugin <= 3.7.1 - PHP Object Injection vulnerability 0.3%
- CVE-2026-42776 WordPress Sunshine Photo Cart plugin <= 3.6.7 - Broken Access Control vulnerability 0.2%
- CVE-2022-45826 WordPress Sunshine Photo Cart plugin <= 2.9.13 - Auth. Broken Access Control vulnerability 0.4%
- CVE-2023-41796 WordPress Sunshine Photo Cart Plugin < 3.0.0 is vulnerable to Insecure Direct Object References (IDOR) 0.4%
- CVE-2022-40692 WordPress Sunshine Photo Cart Plugin <= 2.9.13 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%