sunshinephotocart Vulnerabilities and Affected Products

Open in search

Vulnerabilities associated with Sunshine Photo Cart.

Products

Clear product

Showing 15 vulnerabilities on this page for Sunshine Photo Cart

Signals CISA KEV Ransomware Nuclei
VulnerabilityTitle and contextCVSSEPSSPoCsSignals

WordPress Sunshine Photo Cart plugin <= 3.6.10.1 - Broken Access Control vulnerability

Subscriber Broken Access Control in Sunshine Photo Cart <= 3.6.10.1 versions.

CWE-862Jul 23, 2026
CVSS6.3v3.1EPSS0.249%PoCs0SignalsSTIX

WordPress Sunshine Photo Cart plugin < 3.6.2 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Retrieve Embedded Sensitive Data.This issue affects Sunshine Photo Cart: from n/a through < 3.6.2.

CWE-201Apr 8, 2026
CVSS5.3v3.1EPSS0.24%PoCs0SignalsSTIX

WordPress Sunshine Photo Cart plugin <= 3.5.6.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through <= 3.5.6.2.

CWE-862Feb 20, 2026
CVSS6.5v3.1EPSS0.235%PoCs0SignalsSTIX

WordPress Sunshine Photo Cart plugin <= 3.5.7.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through <= 3.5.7.2.

CWE-862Feb 3, 2026
CVSS5.3v3.1EPSS0.187%PoCs0SignalsSTIX

WordPress Sunshine Photo Cart plugin <= 3.5.7.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through <= 3.5.7.1.

CWE-862Dec 24, 2025
CVSS4.3v3.1EPSS0.169%PoCs0SignalsSTIX

WordPress Sunshine Photo Cart plugin <= 3.5.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Sunshine Photo Cart: from n/a through <= 3.5.3.

CWE-862Oct 27, 2025
CVSS5.3v3.1EPSS0.254%PoCs0SignalsSTIX

WordPress Sunshine Photo Cart plugin <= 3.4.10 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Object Injection.This issue affects Sunshine Photo Cart: from n/a through <= 3.4.10.

CWE-502Apr 1, 2025
CVSS9.8v3.1EPSS0.675%PoCs0SignalsSTIX

WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through <= 3.2.9.

CWE-862Nov 19, 2024
CVSS4.3v3.1EPSS0.404%PoCs0SignalsSTIX

WordPress Sunshine Photo Cart plugin <= 3.2.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through <= 3.2.8.

CWE-862Nov 1, 2024
CVSS7.1v3.1EPSS0.396%PoCs0SignalsSTIX

WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through <= 3.2.9.

CWE-862Nov 1, 2024
CVSS5.3v3.1EPSS0.412%PoCs0SignalsSTIX

WordPress Sunshine Photo Cart plugin <= 3.2.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through <= 3.2.1.

CWE-862Nov 1, 2024
CVSS4.3v3.1EPSS0.439%PoCs0SignalsSTIX

WordPress Sunshine Photo Cart plugin <= 3.2.9 - Open Redirection vulnerability

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through <= 3.2.9.

CWE-601Oct 28, 2024
CVSS4.7v3.1EPSS0.258%PoCs0SignalsSTIX

WordPress Sunshine Photo Cart plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through <= 3.2.5.

CWE-79Sep 17, 20241 related artifact
CVSS7.1v3.1EPSS0.593%PoCs0SignalsSTIX

WordPress Sunshine Photo Cart plugin <= 3.1.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through <= 3.1.1.

CWE-502Mar 28, 2024
CVSS5.4v3.1EPSS0.465%PoCs0SignalsSTIX

WordPress Sunshine Photo Cart plugin <= 3.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through <= 3.1.1.

CWE-79Mar 27, 20241 related artifact
CVSS7.1v3.1EPSS0.721%PoCs0SignalsSTIX