Log in Start free

sunshinephotocart

Products

ProductCVEsExploitedLatest
Sunshine Photo Cart15–Jul 23, 2026
Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers4–Oct 16, 2026

Exploited and recent CVEs

  • CVE-2026-104730 Critical 9.8 Sunshine Photo Cart <= 3.7.4 - Unauthenticated PHP Object Injection via 'key' Parameter 0.5%
  • CVE-2026-57703 Medium 6.3 WordPress Sunshine Photo Cart plugin <= 3.6.10.1 - Broken Access Control vulnerability 0.3%
  • CVE-2026-39564 Medium 5.3 WordPress Sunshine Photo Cart plugin < 3.6.2 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2025-67973 Medium 6.5 WordPress Sunshine Photo Cart plugin <= 3.5.6.2 - Broken Access Control vulnerability 0.3%
  • CVE-2026-24994 Medium 5.3 WordPress Sunshine Photo Cart plugin <= 3.5.7.2 - Broken Access Control vulnerability 0.2%
  • CVE-2025-68535 Medium 4.3 WordPress Sunshine Photo Cart plugin <= 3.5.7.1 - Broken Access Control vulnerability 0.2%
  • CVE-2025-62892 Medium 5.3 WordPress Sunshine Photo Cart plugin <= 3.5.3 - Broken Access Control vulnerability 0.3%
  • CVE-2025-5482 High 8.8 Sunshine Photo Cart <= 3.4.11 - Authenticated (Subscriber+) Privilege Escalation 0.6%
  • CVE-2025-31084 Critical 9.8 WordPress Sunshine Photo Cart plugin <= 3.4.10 - PHP Object Injection Vulnerability 0.7%
  • CVE-2024-49697 Medium 4.3 WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerability 0.4%
  • CVE-2024-47314 High 7.1 WordPress Sunshine Photo Cart plugin <= 3.2.8 - Broken Access Control vulnerability 0.4%
  • CVE-2024-44038 Medium 5.3 WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerability 0.4%
  • CVE-2024-43136 Medium 4.3 WordPress Sunshine Photo Cart plugin <= 3.2.1 - Broken Access Control vulnerability 0.4%
  • CVE-2024-50463 Medium 4.7 WordPress Sunshine Photo Cart plugin <= 3.2.9 - Open Redirection vulnerability 0.3%
  • CVE-2024-43971 High 7.1 WordPress Sunshine Photo Cart plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability 0.6%
  • CVE-2024-30221 Medium 5.4 WordPress Sunshine Photo Cart plugin <= 3.1.1 - PHP Object Injection vulnerability 0.5%
  • CVE-2024-30194 High 7.1 WordPress Sunshine Photo Cart plugin <= 3.1.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.7%
  • CVE-2024-1294 Medium 5.3 Sunshine Photo Cart: Free Client Galleries for Photographers <= 3.0.24 - Unauthenticated Sensitive Information Exposure via Invoice 0.7%
  • CVE-2021-4415 Medium 4.3 Sunshine Photo Cart <= 2.8.28 - Cross-Site Request Forgery Bypass 0.4%